From Bruce Schneier. It’s 3 years old at this point, and I’ve probably posted it before. But, just in case: If you haven’t read it, you should.