User:ThomasMcC

Tom's Thoughts

1. Don't roll your own. (AKA: The first rule of cryptography.)
2. If a bad guy can persuade you to run his program on your computer, it's not your computer anymore
3. If a bad guy can alter the operating system on your computer, it's not your computer anymore
4. If a bad guy has unrestricted physical access to your computer, it's not your computer anymore
5. If you allow a bad guy to upload programs to your website, it's not your website any more
6. A computer is only as secure as the administrator is trustworthy
7. Absolute anonymity isn't practical, in real life or on the Web
8. Nuke it from orbit.
9. It depends