Thank you for your patience. Your civilization is very important to us.
Thank you for your patience. Your civilization is very important to us.
“Mandatory breach bonds, auto-patching, and public bug bounties”
— Wishonia, Planetary Systems Engineer
CISA's budget (NPPD before FY2019) grew 87% ($1.53B → $2.87B) while reported cybercrime losses exploded 1,409% ($1.1B → $16.6B). Complaints nearly tripled. Reported losses grew about 16x faster than the cyber-defense budget.
“Nearly three billion dollars a year for CISA and cybercrime losses went from one billion to sixteen and a half billion. That is a one thousand four hundred percent increase in the thing you are supposed to be preventing. On my planet, we would fire the firewall.”
— Wishonia
The system rewards looking secure on paper, which is ideal if your threat model is an auditor with a clipboard.
Breaches become content instead of treated as priced failures that should have been prevented.
Critical information is trapped in institutional silos because owning the secret becomes more valuable than fixing the flaw.
The real KPI is avoided theft, not how many awareness PDFs were distributed.
How quickly known exploitable flaws get removed from the live system.
If operators underinvest, users should be compensated automatically. Security should be priced, not merely requested.
Protect the nation from cyber-based threats
2017 Equifax breach — 147M Americans' data stolen. $700M settlement, no one jailed. ↗
2018 CISA established within DHS ↗
2020 SolarWinds hack — Russian intelligence inside US government networks for 9 months undetected ↗
2021 Colonial Pipeline ransomware — gas shortages across East Coast. $4.4M ransom paid. ↗
CISA's budget (NPPD before FY2019) grew 87% ($1.53B → $2.87B) while reported cybercrime losses exploded 1,409% ($1.1B → $16.6B). Complaints nearly tripled. Reported losses grew about 16x faster than the cyber-defense budget.
| Year | CISA enacted net discretionary budget authority (FY2015–FY2018: predecessor NPPD; nominal USD) | IC3 reported cybercrime losses (USD, calendar year, self-reported) | IC3 reported cybercrime complaints |
|---|---|---|---|
| 2015 | $1.53B | 1,100,000,000 | 288,012 |
| 2016 | $1.64B | 1,500,000,000 | 298,728 |
| 2017 | $1.82B | 1,400,000,000 | 301,580 |
| 2018 | $1.91B | 2,700,000,000 | 351,937 |
| 2019 | $1.68B | 3,500,000,000 | 467,361 |
| 2020 | $2.02B | 4,200,000,000 | 791,790 |
| 2021 | $2.02B | 6,900,000,000 | 847,376 |
| 2022 | $2.59B | 10,300,000,000 | 800,944 |
| 2023 | $2.91B | 12,500,000,000 | 880,418 |
| 2024 | $2.87B | 16,600,000,000 | 859,532 |
CISA + FBI cyber spending in 2024 data
Cybercrime losses reported to IC3 in 2024
Cybercrime complaints reported to IC3 in 2024
Increase in reported losses since 2015
$4.1B in cyber theatre -> secure defaults + breach bonds
// ProtocolSecurityAgency.ts — critical systems do not get to opt out of basic hygiene
function authorizeCriticalService(service: ServiceConfig) {
require(service.passkeysEnabled);
require(service.autoUpdateWindowHours <= 24);
require(service.breachBondUsd >= minimumBond(service.users));
bugBountyRegistry.open(service.id);
}
// Default-secure systems only. Insecure operators post collateral.Critical systems must ship with passkeys, rapid patching, and posted breach bonds. Independent researchers are paid through permanent bug bounties, and users are compensated automatically when avoidable failures occur. Security becomes a live priced obligation instead of a yearly compliance ritual.
A smaller bureaucracy and far fewer avoidable losses. The real dividend is not writing sixteen billion dollars a year to scammers.
“If reported cyber losses go from one billion to sixteen billion while your budget merely doubles, you are not defending the network. You are narrating its collapse.”
— Wishonia
Every Earth agency has a simpler replacement. Fund the campaign, see the system, set your priorities.