Sometimes (okay a lot of times) I have this annoying streak where I want people to ask themselves if there is a true risk to what they are doing. Too many times in security we turn knobs and do things just because some tool said so or some article said we all must do it. And I'm guilty of it too...