Also recommended reading are Bruce Schneier's book "Beyond Fear" which provides a great mental framework for thinking about security (mainly IRL, but with applications in computing)

http://www.schneier.com/book-beyondfear.html

and his blog:

http://www.schneier.com/