Dramatically Reducing Software Vulnerabilities [pdf]
Those are the usual answers. But they&#x27;re too broad.<p>A good way to look at the problem is that trusted software needs to be far less vulnerable, and untrusted software needs to be kept in a cage where it can&#x27;t make trouble.<p>On the untrusted side, all games, for example, should be caged or sandboxed.  (Yes, this breaks some intrusive anti-cheat mechanisms.  Tough.) Applications on phone-type platforms should have far fewer privileges, (Yes, that breaks some ad networks. Tough.)<p>Until somebody with enough power to make it stick takes a hard-ass position and sets standards, there&#x27;s not going to be progress.  It would be progress if AT&amp;T or Comcast or Verizon deployed secure routers, for example.