Good video - I've been guilty of at least one of these problems and he really steps through the examples in detail. As usual with security the devil is in the details, and defaults.