http://www.perlmonks.org?node_id=157276


in reply to web site design, or lack thereof

Secrets and Lies : Digital Security in a Networked World (ISBN ISBN 0471253111). Really gets into why security is a process, not just a checkbox ("Yeah, we're using only SSL so we don't need to worry about anything else.").

And it's fairly hefty, so it'll leave a good welt when you clobber some with it after pointing out what sage kernel of advice they've ignored. :)