I recently wrote a blog post on what I often refer to as the culture of LAX security.

While that post focuses on the miniscule percentage of sites running under SSL, and how to overcome historic objections SSL it reflects the greater problem of, often respected, hosts, dev/designers, and other 'experts,' downplaying security as less important than cost and convenience.

Adding to the general lethargic history of the way security is deemphasized generally, it's no surprise that we continue to witness increasing numbers of incidents of this scope.

The point is that the open and closed source communities, and ancillary services, especially their leadership, must change the mediocre way security is approached, and how consumers are educated, if we want to break the culture of lax security.

If interested, here is the original post: https://goo.gl/HBckBk