RE: https://infosec.exchange/@SteveBellovin/117621288123129404
Indeed. Cybersecurity’s Original Sin was deciding that instead of fixing a software vulnerability, we should write completely different software to protect it against a threat. IMFO.
Jen Easterly, former director of CISA: “The United States does not have a cybersecurity problem so much as a software quality problem,” Ms. Easterly wrote. “Much of the multibillion-dollar cybersecurity industry exists to compensate for technology built for speed, convenience and features — not security.” (From https://www.nytimes.com/2026/11/15/business/technology-dependence-microsoft-airlines.html?utm_source=flipboard&utm_medium=activitypub -- gift link)