Over on Spire Security Viewpoint they quote me from yesterday, “the future of Internet security is insurance.” Then they remark:

I don’t really get why people keep saying this about security. Sure, insurance is useful. But the implication is that it is okay to do less preventive stuff. I think insurance needs to be treated as a last resort.

Nope, that’s not the implication at all. Continue reading →