The weakest link in computer security is, of course, always the people. (This is just one article in the excellent Economist overview of computer security.)