"When U.S. courts ruled more than a decade ago that consumers weren't liable for fraudulent use of their credit card numbers after the first US$50, credit card companies--which were left holding the huge bill--took notice and dove into fighting fraud and losses.
"That's the same approach needed now in the software industry to help drastically improve IT security, according to Bruce Schneier, a security expert, author and CTO of U.S.-based enterprise security vendor BT Counterpane..."