A look back at "Don’t Copy That Floppy" shows how security campaigns have always depended on more than rules - they have depended on whether the audience actually listens.