How (not) to Suck at Cybersecurity