Evidence and the case for cyber doom

I was told not that long ago, that taking an evidence-based approach to cybersecurity was not possible, because there was no evidence to be had. I disagree. There’s plenty of evidence available. What’s missing is the will to look for it.

Tall Tales and Long Tails