Never spend more than 37% – the golden rule of security spending | Hacker News Reader