4 ms·
Why? I have a small app with a few thousand users that generate almost no money but contain sensitive data - if I were to be fine because of a leak, I would be
by robinhood 8y ago
Why? I have a small app with a few thousand users that generate almost no money but contain sensitive data - if I were to be fine because of a leak, I would be dead financially. Where do you draw the line between the companies that should be fine and those which don't?
No matter how advance our technology is or the security measures we take, any system connected to internet somehow will have a leak or an intrusion or something that compromise security.
- plopz 8y agoAre you arguing that you should be allowed to be reckless because you cannot afford the cost of being careful?
- xur17 8y agoHe's arguing that there is a risk no matter how careful you are, which would prevent a lot of smaller developers from building anything at all.
- always_good 8y agoWell, we need to be realistic about risk, security, and responsibility. And how legislation can have unintended consequences that work against our higher goals. For example, a common refrain on HN is how centralized the internet is becoming. Do punitive damages for mistakes prevent mistakes? How likely is it to create an environment where the only organizations that exist are those that can afford mistakes? Is that worth it, especially in the context of some Twitter passwords that were logged internally? Also, one of the most important awakenings that need to happen in light of recent events is the personal responsibility of who you share your information with. It's just as important as the question of what an organization does with your information. If there were no trade-offs, then we could fix everything with legislation.
- SahAssar 8y agoI'm not arguing for a fine, but companies should be legally obligated to tell their users when the personal data of their users might have been compromised.
- JeanMarcS 8y agoLike with GPDR ?
- deleted 8y ago[deleted]