COMMON SECURITY MYTHS