> nothing seems to change Some might dispute that, but I think you're exactly right in a "big picture" view. E.g. lets pick on Microsoft because it's such an

> nothing seems to change Some might dispute that, but I think you're exactly right in a "big picture" view. E.g. lets pick on Microsoft because it's such an easy target. Bill Gates announced his company wide security effort in 2002. Yes, twelve years ago. And while security at Microsoft has gotten better, I think Microsoft still has plenty to be ashamed of. It's the same everywhere else. There's a forest fire raging and people are walking around with super soakers trying to put out spot fires. Our approach is therefore totally flawed. We need some big picture rethinking of how we are implementing security.