“ Stop assuming that systems are secure unless demonstrated insecure; start assuming that systems are insecure unless designed securely. ”

security superstar Bruce Schneier, writing for Wired (quoted by fergdawg)