I just watched a short video at http://www.rockyh.net/AssemblyHijacking/AssemblyHijacking.html that shows how someone can exploit some bad security (SQL Injection attack, accessing your database as a sys administrator, not applying a strong name to your assemblies, putting too much data into a log file) to get at information they shouldn't see. The best thing about this video is that I am sure that just about any developer would recognize some common mistakes that we all make when assuming how vulnerable our code is. It is also short enough to spend some time with a client or manager showing them this without loosing their interest and it shows just how easy it could be for a determined bad guy to get into your systems.