RISKS Digest got me started too. I think there are some things best learned from the very beginning. "Consider modes of failure" is probably my favourite piece of security advice.