> I'm taking issue with the "blaming the victim" card. I also tend to gag slightly at the phrase "victim blaming", because I think it's a shibboleth that ident

> I'm taking issue with the "blaming the victim" card. I also tend to gag slightly at the phrase "victim blaming", because I think it's a shibboleth that identifies your allegiances and shuts down critical thinking. But I don't actually think it's unwarranted here. Yes, the article says the people involved gave Bindmans their passwords. It also says those passwords were defunct, and that Bindmans had them anyway. It doesn't say that they didn't make reasonable efforts to verify that sharing the passwords was the right thing to do (which, as it turns out, it was). It's extremely ungenerous to respond to that by saying they deserved it for being so crap at security. > Bad security practice is bad security practice and pointing it out doesn't make you Hitler. I am willing to concede that it's unlikely anybody in this thread is Hitler.