"The General Assumption of Security is:

The attacker is smarter than you, he has a bigger computer, he knows your own software better than you, and he is after you, specifically."[1]

[1]: http://security.stackexchange.com/a/19000