People are terribly sloppy at not discussing sensitive work, even when they've been trained and should know better, never even thinking about security implications. As a retired military guy with certain specialized, though rather dated, knowledge, I happened to be sitting in a restaurant prior to a business meeting a few years ago near a military base that has a large civilian contract support and research presence near it. There were a couple of guys having lunch at the next table and apparently "catching up". One guy was chatty. In the half hour I was there, I learned of his organization's budget cuts, where their resources were going to be refocused and what the priorities were, the likely reason certain things were cut because of specific technical issues, how much new work they were expecting on a certain program, and a dozen other things that a military or corporate spy would have loved to hear. I glanced over once and he was wearing his security badge right out in public so I was able to identify his name and organization. Idiot.