We don’t know how to build secure software. I would compare to medicine where we simply don’t know how to cure certain diseases right now. Or maybe how long it

We don’t know how to build secure software. I would compare to medicine where we simply don’t know how to cure certain diseases right now. Or maybe how long it took us to build cars that weren’t a death trap (e.g. hoods used to not crumple on impact, having the unfortunate effect of moving backwards as an entire unit and decapitating the driver). Now that being said, a lot could be done if we followed best practices (which can be extremely simple at times), but even that is often not enough. At my job there are times where I don’t know what the most secure configuration value is even after hours of research. We’ll see this divide more and more. The US, which has the most “rockstars” of the Engineering world, will become highly secure. Other countries, not being home to the biggest computer companies in the world or not in perhaps a form of cyber NATO, will suffer just as they have in healthcare unless action is quickly taken to discover how to and then make software secure for all.