@davidrevoy when i see stuff like this i usually tell them to check out the article on @doot 's infosec blog - While i disagree quite strongly with most of it, it explains things so much better than i can