Dino A. Dai Zovi
Expecting awareness to improve cybersecurity actually counterintuitively produces the wrong results. We blame the victims. Instead, the focus should be on more secure products and environments that make security ignorance safe (still be aware, but that shouldn't be relied upon).
Chris Wysopal
More awareness won't fix cybersecurity.