Charlie Munger on who to blame for the crisis we may be just exiting:
The academic elites failed us with their utterly asinine ideas of risk control. It was grounded on the idea that all risk took Gaussian distributions, which is just totally wrong. Very high IQ people can be completely useless. And many of them are.
And this might well apply to IT security, too, where all too many academics figure we can actually control risk.