Bruce Scheiner is talked about the difficulties of securing the “most complex machine we’ve ever built” – The Internet. His thesis is that security is a social/human and business culture problem, not a technology problem.
Sounds a lot like this Neal Stephenson riff:
“I think that security measures of a purely technological nature, such as guns and crypto, are of real value, but that the great bulk of our security, at least in modern industrialized nations, derives from intangible factors having to do with the social fabric, which are poorly understood by just about everyone. If that is true, then those who wish to use the Internet as a tool for enhancing security, freedom, and other good things might wish to turn their efforts away from purely technical fixes and try to develop some understanding of just what the social fabric is, how it works, and how the Internet could enhance it. However this may conflict with the (absolutely reasonable and understandable) desire for privacy.”
» PDF FILE: Counterpane Security: “Fixing Network Security by Hacking the Business Climate”