Debunking common computer security myths