Security for the paranoid is a nice essay about IT security. BTW I don't think the author is paranoid.