A better approach is to view computer security as an issue of public health and economics, in which people can protect themselves but must pay for the costs they impose on others. We need to enable people to defend themselves against others; prevent innocent, well-meaning people from becoming infected and harming others; and reduce the incentives and ability of the ill-intentioned to do harm.