Measure twice, cut once: sound advice for infosec, too

securityskeptic.typepad.com