Almost all that info was posted originally right here on Unity by me on 7/14/08 before it made it to those other sites.. but no one ever listens..

http://www.boonex.com/unity/blog/entry/Mscott_s_mindless_security_tips