The C-word: What security people don't get about compliance | Dark Hacker News