Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore.