3 ms·
> Not disclosing breaches is now a punishable offense, and this becomes a weapon in the hands of malicious hackers. Maybe that wasn't meant as such, but it com
by JadeNB 7y ago
> Not disclosing breaches is now a punishable offense, and this becomes a weapon in the hands of malicious hackers.
Maybe that wasn't meant as such, but it comes across, at least to me, as an argument that making non-disclosure punishable was a bad idea. If that was the argument, then I'd point out that the same thing can be said of criminalising any offence at all.
- buboard 7y agothere is no argument. there's also no law that demands you to report all crimes. and this law does give an incentive to cover up, as long as the ransom is < fines .
- mannykannot 7y agoAny entity that settles without making the required disclosure of the breach (see my other post) puts itself at risk of being blackmailed over that non-disclosure.
- buboard 7y agoof course, but that is a risk, while the fines are definite
- mannykannot 7y agoDefinite and limited. Once you take the cover-up route, the potential cost escalates unpredictably, and there is nothing definite about the ultimate cost.
- buboard 7y agoactually, the law acts as a guideline about which point you should cut your losses.
- mannykannot 7y agoIndeed it does, which is to not go that route.