Here is something that I have come to slowly believe about computersecurity:

Users don't care about security.

This goes beyond security being a pain . Security issimply not interesting to most people; it has nothing to do withwhat they actually want to do with their computers (or anything else).Instead security is simply a deadweight overhead, something they dobecause they have to. Well, because they have been scared into doingso.

One consequence of this is that people are not interested in educatingthemselves

As I've noted before , I am sort of ahalf-hearted user of code testing; I like it, but I haven't internalizedit to the degree that I do it all the time, even if it's painful orannoying. Sometimes this bits me on the rear as a learning experience,as happened recently.

I have a Python module for dealing with ranges of IP addresses (oftenin the form of CIDR netblocks); I wrote it at least six years agoand have used