[tptacek]

This is the best security article I've read in a long time. If you're at a startup right now, drop most things and take a few minutes to read it carefully.