10 Immutable Laws of Security http://technet.microsoft.com/en-us/library/cc722487.aspx http://technet.microsoft.com/en-us/library/cc722487.aspx Law #1: If a b

10 Immutable Laws of Security http://technet.microsoft.com/en-us/library/cc722487.aspx http://technet.microsoft.com/en-us/library/cc722487.aspx Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore. Law #3: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore. --- Law #1 should be expanded nowadays: "If a bad guy can persuade you to plug his widget into your computer, it's not your computer anymore. In the USB case, the widget (phone) contains the bad guy's program.