The problem is that many of the recently published hacks are embarrassingly simple. These are hacks that are impossible if you have a decent security policy in

The problem is that many of the recently published hacks are embarrassingly simple. These are hacks that are impossible if you have a decent security policy in place. The biggest issue, and the one that these hacks are highlighting, is that the software industry has a huge security problem. And this is mostly because the industry has a huge quality problem (security is an aspect of quality, it's not a feature). It's not that it's that much more expensive to build high-quality secure software. The research indicates that high-quality software projects are actually cheaper than average software projects because the maintenance cost is much lower. The state of the art is far removed from the average practition of the art. Nobody has a solution for that. Lulzsec are just a symptom, they are not the problem.