> Everybody is insecure everywhere always, Not everyone has this amount of personal data, including social security numbers, names, credit history on 140M Amer

> Everybody is insecure everywhere always, Not everyone has this amount of personal data, including social security numbers, names, credit history on 140M Americans. So no, it' not "just like everybody" > N is very small -- maybe four? That is a ridiculously long time for a company holding the kind of data they are. "Yeah, yeah enterprise whatevs, I know". But I work in enterprise as well and we patch and roll out security updates within days. Like you said, it is mostly "apt-get upgrade" run from Chef or whatever management system they got. > "they failed to run the equivalent of sudo apt-get upgrade on their framework." Don't agree with that. It's like saying "The train conductor _just_ had to press the break in time. It's a simple action. Let's not overreact here..." > machines, this is a situation that almost all of us have wound up in. I somehow never wound up holding personal data of 140M people. And if someone told me to "hold that data", I'd say "sorry, I am not qualified, it is highly likely I'll mismanage it and it will be hacked". > Are you sure you won't be next on the chopping block? No it's not. Because I don't have the personal or financial data of that many people in my care.