>Malicious hacking is already illegal with significant penalties. Yes, more people should end up in jail. >If the victims failed even basic security measures,

>Malicious hacking is already illegal with significant penalties. Yes, more people should end up in jail. >If the victims failed even basic security measures, I'm quite happy to give them their share of blame. Please detail how you have established that the victims themselves personally ignored security practices. >There have been plenty of reports of exposed databases with no password protection, places that stored passwords in plain text, folks running unpatched OSs... You can't just ignore security and pretend that you're not at fault. You are making broad claims. Remember that the non-technical business owners/managers/CEOs etc need our help, and they don't need people shaming them for using vendors or consultants who might have made made mistakes.