Ten quick fixes for the worst security nightmares