Can we make Security Empirical, and why might we want to? | Dark Hacker News