This article from Bruce Schneier (the thinking person's expert on computer security) is a thoughtful discussion of the law of unintended consequences.