Don't forget about those security questions. Those are your enemy. Also, for example, the AC Board uses login over HTTP instead of HTTPS so anyone on the same network can easily sniff your password. Try to use HTTPS whenever possible. There's an add-on called HTTPS everywhere for you Firefox users. I think it's on Chrome and IE as well.
Physical security is important too. Leave me alone with a computer in the same room for 3 minutes and I'll be in your computer. If you had AD and folder redirection, I wouldn't be able to get anything off the computer even if I stole it. I would need to steal the server.
.png "ACUF Donor I")
