In 1987, a German student wrote CHRISTMA EXEC – a virus whose basic mechanisms still work if you port them to today’s desktop computers. Why haven’t we changed in nearly 30 years? And what could we do instead?