5 ms·
The major problem with your analogy is that storefront windows don't have hundred or thousands of bricks thrown at them everyday. Web hosts are basically under
by jammur 16y ago
The major problem with your analogy is that storefront windows don't have hundred or thousands of bricks thrown at them everyday. Web hosts are basically under constant attack. Would you suggest that the CIA, NSA, etc. not worry too much about their computer security? If not, then I don't see why you would imply a web host shouldn't be expected to secure their servers as much as possible either.
If a storefront was under constant attack, then yes, they should have bars over it. In fact, in my hometown, there was a streak of vandalisms where kids were throwing bricks through windows. After getting hit 3 times, one store replaced their huge glass windows with smaller plexiglass ones.
- nbpoole 16y agoI think you're missing the point of the analogy. Check out http://en.wikipedia.org/w/index.php?title=Victim_blaming&oldid=419679081 http://en.wikipedia.org/w/index.php?title=Victim_blaming&...
- parfe 16y agoLet's not forget that the victim here is PHPFog's (potential) customers and not PHPFog itself.
- nbpoole 16y agoI can agree with you that PHP Fog's customers were affected and are thus victims. I don't understand how PHP Fog isn't a victim here though.
- parfe 16y agoI promised myself I'd avoid another analogy but... If I give the bank my money and the next day I get an email saying "Sorry, we didn't feel like locking up last night and some kids looted the vault." I'd have a hard time calling the bank the victim. And something concrete: PHPFog knew the holes existed and were negligent. I would say they even have some contributory negligence (IANAL). Especially after admitting they knew they were vulnerable.
- tptacek 16y agoYou know what we call kids who loot bank vaults? Bank robbers.
- parfe 16y agoNo, we call them juvenile delinquents and treat them like children. And we certainly don't call the bank the victim.
- nbpoole 16y ago1. We don't treat them like adult criminals (necessarily), but we certainly treat them like criminals. Here are some examples (some harsher than others): Bank robber, 13, could get 21 years in US jail (http://www.breitbart.com/article.php?id=CNG.cb17379375828ffc0e967dfc1258dbd6.191&show_article=1 http://www.breitbart.com/article.php?id=CNG.cb17379375828ffc...) Teen bank robber to be held for two years (http://www.morningjournal.com/articles/2011/02/18/news/doc4d5ead635c892274913549.txt http://www.morningjournal.com/articles/2011/02/18/news/doc4d...) Boy, 15, Charged in Armed Bank Robbery in Lancaster (http://articles.latimes.com/2002/aug/09/local/me-bankrob9 http://articles.latimes.com/2002/aug/09/local/me-bankrob9) 2. Why do you think banks aren't considered victims in cases of robbery? Because they could have done more to prevent the robbery from happening?
- parfe 16y agoYou're conflating armed robbery, a violent crime, with hacking a web site? That's the end of this thread.
- jasonlotito 16y agoDude, you started the metaphor with tour comment. Can't exactly blame someone for calling you out on it.
- jammur 16y agoBanks are absolutely considered victims, but if the victim didn't do their due diligence with respect to keeping their vault secure, then they absolutely share in the blame.
- jammur 16y agoI'm well aware of victim blaming, but sometimes it's justified. If someone hacked into your bank account and stole your money because of a security flaw your bank decided to put off until later, surely you would lay blame on your bank as well, no? Let me be perfectly clear, lots of the blame lies with that attacker. But it is also the responsibility of the a web host to fortify their systems sufficiently, which clearly wasn't done in this case.