Reading point #4 on a site called "Hacker News" seems rather ironic.
I wonder how you might encourage deeper introspection into software infrastructure security vulnerabilities, both from closed source companies and from obscure open source projects, without "spreading breadcrumbs for the roaches"
"The Six Dumbest Ideas in Computer Security"
> #1) Default Permit
> #2) Enumerating Badness