Serious security: Three changes that could turn the tide on hackers