2 ms·

We don't hold car companies accountable when their locks are not thief proof or window companies when someone breaks your window. Usually, this isn't a problem

by Eridrus 10y ago

We don't hold car companies accountable when their locks are not thief proof or window companies when someone breaks your window. Usually, this isn't a problem because we deal with this through law enforcement, but law enforcement is very difficult and expensive on the internet, particularly now that you can accept payment in bitcoin. The reason we have insecure systems is because we deal with systems that require constant vigilance to make sure we do not make mistakes in the face of adversaries. This doesn't scale for users and this doesn't scale for developers either. There are certainly people who take security more and less seriously, and this would definitely move the needle on that, but I am not really sure it would move the needle on actual security, since actual security is hard. Say good bye to startups if criminal negligence becomes a thing.

NotSammyHagar 10y ago
We need to hold car companies liable when they make trivially breakable key systems and ignition systems. Then they will make them more reliable. A guest at that hotel should be able to ask for a refund or sue the hotel for damages (to their time, their trip?), esp. if it was found the hotel didn't take basic steps to secure the card keys (like separating that system from the internet). The hotel should be able to sue the key manu system if they didnt keep their system safe. I stayed in a hotel in Canada recently and their card key system was not on the internet - you had to type in the room number on a keypad. That seems fraught with potential for wrong number or time, but it also keeps that from getting infected from the internet.