>what paradigm shift needs to happen before breaches stop being depressingly common, Reduce the value of a breach. That is to say: minimize the records kept,

>what paradigm shift needs to happen before breaches stop being depressingly common, Reduce the value of a breach. That is to say: minimize the records kept, minimize the amount of correlation that can be done between multiple sets of records (both internally and across multiple parties), minimize the damage a user can do to themselves or others at every single level of authorization. >and why isn't that shift happening? A subject's anonymity and independence are all antithetical to the system's profitability (and often to ease of development). Finally: no one can steal surveillance records that don't exist. Maybe we think about ending the ubiquitous surveillance of the US population?