The Six Dumbest Ideas in Computer Security

#2 - Enumerating Badness - I see that in a lot of different areas. Don't look for what you think is bad - instead, look for anything that isn't good. That way you find bad stuff you never thought of before.