Computer security is at a crossroads. Solutions won't have anything to do with technology. Real security improvement will only come through liability. A three-step program is presented. None of the steps has anything to do with technology; they all have to do with businesses, economics, and people.