Sorry, this is going to be a somewhat philosophical rant, written on a plane as I am flying to an Annual Honeynet Project Meeting in Chicago.
So, the other day I was talking to a friend who used to do software engineering for a certain security company. In the middle of our conversation he mentioned that he moved away from security and got more interested in other, more "useful" products for businesses and even consumers, since when people buy them "their eye light up" since they bought something they might enjoy using. On the other hand, people [sometimes grudgingly] accept security solutions and that makes creating them somehow less fulfilling experience.
Do you agree? Even if people buy security because they have to (and one can make good money selling some things that people have to buy...), the above argument still stands.