Dumbest ideas in Computer Security
Here’s six of the best from Marcus Ranum
1. Default Permit
2. Enumerating Badness (should only track the good things)
3. Penetrate and Patch
4. Hacking is Cool
5. Educating Users
6. Action is Better Than Inaction