Security expert/pundit/provocateur Bruce Schneier had one of those “Hes right but so what?” columns on Wired.com last week. Schneier writes: “The primary reason the IT security industry exists is because IT products and services arent naturally secure” Schneier: “Aftermarket security is actually a very inefficient way to spend our security dollars; it may compensate for insecure IT products, but doesn’t help improve their security” He says security companies make money based on insecurity; investors wager on the prospects of this happening.”]

