Computer security faces fundamental problems due to flawed foundational ideas, particularly 'Default Permit' policies that allow all traffic or code execution by default unless explicitly blocked. This approach creates endless arms races with attackers and remains widespread despite decades of evidence that deny-by-default strategies are superior.