Simon Willison’s Weblog

The Psychology of Security. I haven’t even started on this yet, but I bet it’s worth reading.