> But what/who do we blame? No one? We shouldn't be assigning "blame" because the public doesn't have the same specialized education that we have to understan

> But what/who do we blame? No one? We shouldn't be assigning "blame" because the public doesn't have the same specialized education that we have to understand the nuances of "APIs" vs "breaches." I think what needs to be done is to create an easily understandable formulation of "privacy-as-a-right" and teach that.