Because a friend found this useful yesterday:
Before tackling a problem, figure out whether it's the sort of problem where when you've solved 80% of the problem, you've solved 80% of the problem, or the kind where solving 80% means you've solved 0% of the problem.
This is especially important in security and privacy because that last 5% might be impossible.