> You may not be able to make things impossible for an attacker, but you can sure make them want to go somewhere else for easier pickings (if they're not target

> You may not be able to make things impossible for an attacker, but you can sure make them want to go somewhere else for easier pickings (if they're not targeting you, specifically - if they are, you're probably screwed) True but this is how all security works. Not just in IT. Nobody has perfect physical security either. We just use the best lock on our door or bike to make the thief move to the next one over, or in some cases to a different type of crime entirely (for example bank robbing and kidnapping seem to be much less popular than in the 80s) Even something like Fort Knox can be robbed but it would require a party with state-level resources and there's much more valuable things than lots of gold that you can obtain more easily. Having security has never been perfect but always a matter of "most likely good enough for the expected threats". This is also why mitigation and planning is so important in security. Not just to focus on preventing the hack ever happens, but to have good plan of what to do if it does. And no it'll never be possible to relax and consider security "solved". It'll always be a cat and mouse game. Also applies to all forms of security. Even physical locks still get new exploits found like the bump key and computer based picks. So I'm pretty sure we'll just keep going as we are. We'll never achieve perfect security but we won't go back to goat farming either. It won't even solve our problems because there'll always be criminals ready to steal our goats. The real problem is human nature. Or even nature in general: whatever weakness turns up a predator will step in to exploit it. We're just moving the battlefield.