Can we make Security Empirical, and why might we want to? | Hacker News Reader