4 ms·
Humor me here: we should decriminalize hacking. It's the only way to force companies to take security seriously. If they can't rely on government to track down
by pitaj 8y ago
Humor me here: we should decriminalize hacking. It's the only way to force companies to take security seriously. If they can't rely on government to track down and punish hackers, financial companies especially will have to step up their game and take proactive steps to prevent issues like this.
- cncrnd 8y agoThat would be a mistake because it also incentivizes hackers, making the problem bigger on that side. What I would like is something that punishes companies that get hacked as well, like set fines for leaking personal information instead of settlement. People same to take GDPR seriously, a similarly stringent regulation on security practices would be effective.
- thaumasiotes 8y agoHow much of a success do you perceive PCI requirements as being?
- asenna 8y agoThat's like saying we should decriminalize robberies so that it forces companies to take stricter security measures. You'll end up incentivizing robberies much more.
- pitaj 8y agoI'm all for decriminalizing nonviolent robberies. If the person is caught they can be sued for damages like anyone else, and maybe fined instead of sent to prison. Decriminalizing is not the same as legalizing.
- namibj 8y agoErr, a robbery is defined as theft under the use force or threat thereof. Where do you draw the line due to psychological effects?
- QasimK 8y agoIt's possible you're talking about different things. When robbery was mentioned asenna, I was imagining an empty house being robbed.
- namibj 8y agoUh, that's not robbing, that is breaking and entering combined with, most often, plain theft. It might be that US law includes this in the definition of robbery, but German law seems to distinguish clearly.
- QasimK 8y agoThanks for adding weight to my assessment that different people might have been thinking about very different things despite reading the same sentence.
- QasimK 8y agoPerhaps only remote hacking where you are not physically in the same location as what you are hacking (or have not caused any physical alterations). This kind of "hacking" should be entirely stoppable and entirely non-violent. Since it is stoppable, companies can stop all hacking. It will incentivise hacking, and thus incentivise companies to actually take security seriously. This is different to decriminalising robberies because you cannot actually stop all robberies unlike remote hacking. Or at least there is a real possibility of harm during the cause of a stopped robbery. Stopping a remote hacking attempt won't cause physical harm, though perhaps it could cause financial harm. I'm not including attacks like denial of service when I say "hacking".