SharePoint Security: Hard limits and recommended security practices

I was just turned on to this blog entry by one of my co-workers (Click here to see what he's blogging about: Lamont Harrington), which has a great list of some of the "hard limits" set in SharePoint and some of the workarounds. For example, I didn't realize that there was a limit on the number of users in a Site Collections User Info Gallery! I would have assumed that it was limited on the Identity-store side, but not on the SharePoint side, since I assumed that it was reading it straight from the Identity-store and just presenting the information. I guess it's true what they say about ass-u-me-ing things. Embarrassed The author also list a set of Security Guidance around SharePoint, which is not extensive, but is a very nice collection.