Ross Anderson, noted professor of computer engineering in the Cambridge Computer Laboratory, explains "Why Information Security is Hard" in economic terms [1]. It isn't because we need better security technology or security models or cryptography. It is because there are perverse economic incentives. It is still a "guns or butter" decision. Why should owners of computing technology buy security technology instead of more functionality or other things altogether?