Information security insights and other ramblings