https://blog.kamens.us/2014/03/20/how-not-to-run-a-computer-security-company/