5 ms·
If we make the developer, the developer's manager, and the entire org chart from there up to the CEO personally and criminally liable for any leaks and improper
by wang_li 8y ago
If we make the developer, the developer's manager, and the entire org chart from there up to the CEO personally and criminally liable for any leaks and improper use of data, there would be zero need to opt out as they could not then externalize the costs of their shitty practices.
- xyzzy_plugh 8y agoI'm fine with simply C-levels being held responsible, which is how this traditionally worked anyways.
- 21 8y agoWe would also stop having any new software. Do you really want all software to cost $1 million per line like NASA software? Do you want the high school kid in his bedroom to go to prison because he wrote a "site" and his friends data got leaked?
- alexanderdmitri 8y agoI think there's middle ground here.
- jhall1468 8y agoYes, criminalize software bugs. Brilliant idea.
- wang_li 8y agoOnly in the context of data gathering. There is plenty of buggy software that doesn't result in my social security number, credit report, passwords, and chat history spread across the internet. It's no different than requiring, e.g., farmers to limit how and when they apply fertilizer and pesticides so as to limit runoff and down stream pollution.
- jhall1468 8y agoNo it is different, because this a conversation about telemetry which is exactly none of your social, credit report or passwords. Suggesting that developers should be criminally liable for your usage statics getting released is borderline insane.
- Rantenki 8y agoCriminalizing bugs would be insane, and would drive up the cost to create software, and probably also drive down the quality (due to pushing us into a smaller ecosystem of proprietary code). It would definitely kill open-source, because who would be stupid enough to release a source-tree that could send them to jail. That said, statutory civil penalties (fines per occurrence) for the effects of the bug in production _would_ fix the problem. Who is going to keep giant data-lakes around when they are the business equivalent of toxic waste? The developers are still able to write code, but they are incentivized to not collect extraneous user data.