So the ethic I was taught in school resulted in the path I chose in my life following school.

My argument is not that I shouldn't have been punished, but that the punishment didn't fit the crime.

You can't go to Windows Update and get a patch for stupidity.

But a lot of businesses out there don't see the return on investment, they look at it as a liability, and until they can understand that proactive security actually returns, gives them a return on investment, it's still a hard sell for people.

I get hired to hack into computers now and sometimes it's actually easier than it was years ago.

I think it goes back to my high school days. In computer class, the first assignment was to write a program to print the first 100 Fibonacci numbers. Instead, I wrote a program that would steal passwords of students. My teacher gave me an A.

Companies spend millions of dollars on firewalls and secure access devices, and it's money wasted because none of these measures address the weakest link in the security chain: the people who use, administer and operate computer systems