I'm not a big fan of regulation, but it feels like there is very little _internal_ motivation for a place like Yahoo to take security seriously.

Not sure what the solution is, but unless there is a financial reason to create, I don't think we'll see much change.