“I am regularly asked what the average Internet user can do to ensure his security. My first answer is usually 'Nothing you're screwed'.”