The problem with security is that it's all stick based, not carrots. Nobody gets a raise for following good security practices -- just firing, fines, and jail

The problem with security is that it's all stick based, not carrots. Nobody gets a raise for following good security practices -- just firing, fines, and jail time. Meanwhile "mass paranoia" masquerades as "security best practices". The janitor example you bring up is a great example. A decade ago Frontline had a report on female janitorial staff being raped [0]. Instead of providing job security, wage security, and physical security to allow workers to do their job without fear, we threaten them to "be secure or else." If I were China, I know straight where to go! [0] https://www.pbs.org/wgbh/frontline/article/rape-on-the-night-shift/ https://www.pbs.org/wgbh/frontline/article/rape-on-the-night...