Infosec's ability to quantify risk | Hacker News Reader