https://jonathansblog.co.uk/security-tackling-the-hard-problems