Intrusion detection: doing it wrong | Hacker News Reader