I mean simple mistakes, like not understanding that information on an air gapped machine is unknowable to another machine on the network. "If you took the tax

I mean simple mistakes, like not understanding that information on an air gapped machine is unknowable to another machine on the network. "If you took the tax id and social from 'airGappedMachine'" "It has no connection to any other machine" "Just query the database" "Store it on a thumbdrive and walk it over? It changes quite often I don't think that's a good workflow" "No, just query it" "How?" "SQL!" Or the classic: "That password only has N characters, I can crack that in Y seconds" "You are the Administrator of that box, you can simply reset the password and do whatever you like." "Yeah but the hackers.... Y seconds" "It's not Y seconds for them, if they already are an Administrator or have read database access it's game over anyway they have to use the API and that locks you out after 3 attempts. Also your are assuming a much easier hashing method than is actually in use." "Yeah but my calculator says Y seconds so it's Y seconds"