I used to spend my time dealing with security at a military scale for computer systems. I was not guarding anything in terms of weapons etc, just following process for protecting documents I was managing. If there was one thing that irked me was when people thought they were safe, but then did stupid things to completely undermine the security. For example, going in through the main enterence involved stringent security checks, but going through the side enterance the only check was on your car speed. My data was far less protected once physical security was compromised! Bring this into the world of computers and my role now, many people do things to enable them to feel safe - load A/V software, run multiple malware detectors, check the patch level on their firewalls, even if they are hardware filewalls, keep their systems patched, ensure the clients and servers are locked down with their own firewalls configured and managed by policy. I could go on, and of course you all do these things already, right? It was...