DaveB on ITToolbox has a post today entitled How to suck at security. It's a short list, but it links to a longer one.
I really like the list format "How to suck at *whatever*"
Sometimes you don't ever look for the right way to do something until you learn that you're doing it the wrong way.