2 ms·
I think says it all about how worthless (in a corrective sense) this report and investigation was: From "Recommendations (1)": > Congress should pass legislat
by gist 7y ago
I think says it all about how worthless (in a corrective sense) this report and investigation was:
From "Recommendations (1)":
> Congress should pass legislation that establishes a national uniform standard requiring private entities that collect and store PII to take reasonable and appropriate steps to prevent cyberattacks and data breaches.
So there you have it. 'Reasonable and appropriate'. There is such a large amount of room to wiggle in a statement like that it is laughable (with a complex subject like this).
- txcwpalpha 7y agoI too would love to see the federal government take a much stronger role in developing strong and effective security standards, but you also have to realize that the congressional subcommittee that created this report specifically has the job of investigating situations like this, and is not intended to be a body that prescribes in-depth solutions. It should be a separate body, one with real security expertise, that does that.
- sjy 7y agoIt's not sufficient to put a bill to a vote, of course, but it's not worthless. Other recommendations could have been "prosecute Equifax executives for breaking existing laws," or "do nothing, because federal regulation won't solve this problem." The US has been making important legal decisions (about the constitutionality of bills, or the guilt of people who kill in self-defence, for example) on the basis of a reasonableness standard for centuries.