I am pretty sure this is quite an unpopular opinion, but I think that the biggest issue we have in computer security is culture.<p>Information security breaches are not victimless crimes. The ubiquity of massive security failures shows that they are not rare occurrences. I believe that this symptomizes a failure of our culture, related to an inability to integrate information technology into the proper context within our society.<p>Sure, we need to be aware of exploit patterns so that we can make structural improvements, but we don't need to become jolly experts in them. We should stop glorifying cyber-criminals.