For me this was just the start of a thought experiment. He didn't take the train past the first station. At first glance it seems like "Oh if only cybercrime w

For me this was just the start of a thought experiment. He didn't take the train past the first station. At first glance it seems like "Oh if only cybercrime were illegal then companies would have to step up their security practices." But this just isn't true. The companies responsible for the security holes in IoT devices are not the ones who suffer because of the DDoS attacks launched with them. Similarly, the free market response to the current reality of cyber crime is not for makers of vulnerable devices and software to simply make better products, but it is additional services and companies rising up to fill needs. Some of these are effective and others are not, and they all cost a lot of money for the victims of the attacks, and not for the people making vulnerable products. For me this blog post was really lazy and needed a lot more thought put into it.