The commitment by the federal government to further computer security research may be laudable, but it fails to address the root cause of most security issues: bad software.