&gt; Maybe we could go a bit further and say that a proven security breach (i.e. an unauthorized person actually accesses your device) carries some concrete liability, for example $500 plus a refund of the purchase price?<p>Yeah, that&#x27;s exactly the kind of thing I was thinking about for market incentives. Right now the immediate cost to a company is zero so the only question is whether it&#x27;ll cost them future sales. Even a simple refund of the purchase price would be a big shift.<p>I rather like the bounty idea, too, particularly if we could combine it with some sort of clearing house so e.g. the person who finds an unprotected webcam doesn&#x27;t have a reason (or excuse) to identify the owner.