So here we are with the software equivalent of nuclear terrorism - no cost-effective way to secure every target and only a few have to get hit to be profitable for the crooks. There are ways around this issue, but it takes far longer to roll out new features into established systems than it is to hack the current features. To clear this up would require concerted effort and expenditures on the part of the customer - who really isn’t interested in security and doesn’t want to spend their money on that but would rather decry the institutions and say it isn’t their problem.
Or maybe I’m too cynical. I think there are people out there who care enough to spend money on a solution (say like me) but are there enough? And how would we find out?
