Patterns of (In)Security