> do better security is like dismissing doctors because people should get more exercise Not dismissing doctors but making fat people (or drug users etc) pay m

> do better security is like dismissing doctors because people should get more exercise Not dismissing doctors but making fat people (or drug users etc) pay more is not that silly and happens. There need to be standards (ISO, PCI) for all companies. And if you get hacked, you get fined if you did not adhere to the standards. And yes, go after the criminals as well, but bit to easy to just ignore ancient Windows installs and users with passwords 1234 who have admin access etc. All these issues are stated in both ISO and PCI compliance: we just need to have all companies comply, not just banks etc.