3 ms·

Imprisoning CTOs for incompetence would be unprecedented. We don't imprison people for that reason and I can't imagine any knowledgeable CTO ever taking that po

by jjeaff 7y ago

Imprisoning CTOs for incompetence would be unprecedented. We don't imprison people for that reason and I can't imagine any knowledgeable CTO ever taking that position again once that precedent was set. But we do need much more oversight and serious punishment for companies that lose data like this.

616c 7y ago
Security engineer here. Why? US soldiers fight in combat knowing failure to obey orders can land them in jail for years. The US Code of Military Justice is not fun, and you sign up for it when you join implicitly. Is there an armed service staffing problem? Our general US legal system is flawed, but cops can go to jail for ethical violations and criminal behavior for actions that are integral parts of their job function. Is there a cop staffing shortage? I have argued this, ironically, about US Congresspeople: if we have a volunteer army with stringent legal codes with special punishment by virtue of their job, serving us, why are other classes of people not worthy of higher standards and why do we suspect people will shy away from that? How can we pay others more for higher probability of incompetence and less repercussions? I am not trolling. When I suggested this shows the power of commitment in volunteer armies and I wish Congress had that kind of self respect people tell me I'm nuts. I would like a CTO and security industry jobs to mean something.
- jjeaff 7y ago
  A CTO can go to jail for unethical and illegal behavior. But you are suggesting they be jailed for incompetence. And considering the fact that no amount of competence will protect you from a sufficiently motivated and resourceful hacker, seems unfair. Now if we come up with a framework and a security checklist that must be followed and certified by the CTO every quarter or something, and they don't do it, or lie, then sure, jail them.
rhizome 7y ago
Everything was "unprecedented" at some point before they existed. It's only a matter of choice and priorities.

by jjeaff 7y ago

616c 7y ago

Security engineer here. Why? US soldiers fight in combat knowing failure to obey orders can land them in jail for years. The US Code of Military Justice is not fun, and you sign up for it when you join implicitly. Is there an armed service staffing problem? Our general US legal system is flawed, but cops can go to jail for ethical violations and criminal behavior for actions that are integral parts of their job function. Is there a cop staffing shortage? I have argued this, ironically, about US Congresspeople: if we have a volunteer army with stringent legal codes with special punishment by virtue of their job, serving us, why are other classes of people not worthy of higher standards and why do we suspect people will shy away from that? How can we pay others more for higher probability of incompetence and less repercussions? I am not trolling. When I suggested this shows the power of commitment in volunteer armies and I wish Congress had that kind of self respect people tell me I'm nuts. I would like a CTO and security industry jobs to mean something.

jjeaff 7y ago
A CTO can go to jail for unethical and illegal behavior. But you are suggesting they be jailed for incompetence. And considering the fact that no amount of competence will protect you from a sufficiently motivated and resourceful hacker, seems unfair. Now if we come up with a framework and a security checklist that must be followed and certified by the CTO every quarter or something, and they don't do it, or lie, then sure, jail them.

rhizome 7y ago

Everything was "unprecedented" at some point before they existed. It's only a matter of choice and priorities.