3 ms·

Yes, they should. Those of us that worked in regulated industries (health, nuclear, etc.) had to do that for a long time now, at least based on my experience i

by groby_b 10y ago

Yes, they should. Those of us that worked in regulated industries (health, nuclear, etc.) had to do that for a long time now, at least based on my experience in Germany. If your system has the potential to bring down the entire airfleet you sold, yes, you're on the hook for that event. Try building systems that are resilient in the face of failure, make that case to the insurer, premiums will go down. I'm tired of the argument "well, we can break A LOT of shit in one go, so we shouldn't be held liable for our sloppiness". It's "too big to fail" in disguise.

zild3d 10y ago
It doesn't seem that clear cut to me, from what I see insurance liabilities in the US and throughout Europe are capped at a dollar amount or up to the corporate equity, not the full damage costs. Nuclear disasters like Fukushima or Chernobyl have cost estimates that are each well over $200 billion. What insurance policy or company can foot that bill? http://www.theecologist.org/blogs_and_comments/commentators/2265605/the_true_cost_of_disaster_insurance_makes_nuclear_power_uncompetitive.html http://www.theecologist.org/blogs_and_comments/commentators/...
joncrocks 10y ago
I think the difference is that the types of problems caused are kind of second-order effects based on co-ordination, rather than individual actions that each device is taking that is 'bad'. So yes, air plane manufacturers might have insurance to cover them for all of their planes being down, but it's probably limited to the first-order damages of all of the planes being down, rather than the potential extra due to the fact they are all down at the same time. e.g. If I own a mail-order business and I ship my stuff via air (with no contracts in place etc.), and suddenly no air planes can fly, so my business folds, I probably can't sue the air plane manufacturers. In a similar way, the individual 'damages' that are attributed in a DDOS attack are due to the coordinated nature, rather than each device doing actual harm/damage.
- groby_b 10y ago
  Yes, second-order effects are harder to insure against, because the actuarial computations are harder. But introduce liability for the issue, and insurance will follow. "It's hard to do things right" is not an excuse for not doing them right.

by groby_b 10y ago

zild3d 10y ago

It doesn't seem that clear cut to me, from what I see insurance liabilities in the US and throughout Europe are capped at a dollar amount or up to the corporate equity, not the full damage costs. Nuclear disasters like Fukushima or Chernobyl have cost estimates that are each well over $200 billion. What insurance policy or company can foot that bill? http://www.theecologist.org/blogs_and_comments/commentators/2265605/the_true_cost_of_disaster_insurance_makes_nuclear_power_uncompetitive.html http://www.theecologist.org/blogs_and_comments/commentators/...

joncrocks 10y ago

I think the difference is that the types of problems caused are kind of second-order effects based on co-ordination, rather than individual actions that each device is taking that is 'bad'. So yes, air plane manufacturers might have insurance to cover them for all of their planes being down, but it's probably limited to the first-order damages of all of the planes being down, rather than the potential extra due to the fact they are all down at the same time. e.g. If I own a mail-order business and I ship my stuff via air (with no contracts in place etc.), and suddenly no air planes can fly, so my business folds, I probably can't sue the air plane manufacturers. In a similar way, the individual 'damages' that are attributed in a DDOS attack are due to the coordinated nature, rather than each device doing actual harm/damage.

groby_b 10y ago
Yes, second-order effects are harder to insure against, because the actuarial computations are harder. But introduce liability for the issue, and insurance will follow. "It's hard to do things right" is not an excuse for not doing them right.