You know what's bizarre? Amidst all this drumbeat of news about cybercrime trashing government, and with the clear evidence that the US 2016 turned, at least pa

You know what's bizarre? Amidst all this drumbeat of news about cybercrime trashing government, and with the clear evidence that the US 2016 turned, at least partially, on cybercrime: NOT ONE of the candidates for US President has undertaken any effort to boost their own infosec. (Or if they have, they keep it quiet.) What can they do? The same stuff we do in any SaaS business: Rudimentary security training for everybody, including bigshots and candidates. (Podesta got phished, twice!) Make sure their laptops and office computer equipment are up to patch levels and the malware detectors work. Engage one of the large-scale email providers; they have topnotch dedicated infosec people, good spam traps, and a lot to lose if they visibly mess up. Adopt strong multifactor authentication. Hire compentent pentesters and remediate any vulnerabilities they find, fast. Let their donors and the public know they're taking action (not WHAT action of course, just that they're on it.) Governments should do the same for their constituents and taxpayers. Now, maybe candidates will argue they don't have time for the extra security. But, in 2019, that argument shows they're unfit for public office. One candidate learned that the hard way in 2016. No more of this.