Reference 1
http://web.stanford.edu/group/sequoia/
http://web.stanford.edu/group/sequoia/cgi-bin/
If you could revise
the fundmental principles of
computer system design
to improve security...
... what would you change?