Who is responsible? --- As I have suggested elsewhere in this module, should we leave the ENTIRE responsibility to software providers to prevent attacks? Is this feasible or practical? Or should the burden be shared between the corporate and individual users AND the the providers? I know this is a difficult and sensitive area, but it is important to the discussion because it appears that simply placing the entire focus and emphasis on the supply side of the equation is not solving the problem. So should we not be trying a different approach?

Source author: Tracy Hackshaw TracyH@diplomacy.edu