> I'm pissed off at the state of information security [...] I'm pissed off that our tooling is falling behind. I'm pissed off that my clients don't seem to take

> I'm pissed off at the state of information security [...] I'm pissed off that our tooling is falling behind. I'm pissed off that my clients don't seem to take it seriously Information security, like physical security, isn't something people want to have to care about or put effort in, and if they don't want to, they often won't. What you should be pissed about is that clients have to care and it isn't applied transparently. When being insecure is more difficult than being secure, then you'll find the mindset shift. In the meantime, you should be pissed off at those that make security difficult, not those that care less to endure those difficulties. I know some of the post addresses vendors, but the rest concerning your-company software and vendors is misplaced anger.