> As a member of society, I don’t care if I’m paying a professional ransomware group, or a professional corruption gang. The kidnapping analogy makes for a bet

> As a member of society, I don’t care if I’m paying a professional ransomware group, or a professional corruption gang. The kidnapping analogy makes for a better understanding of why paying ransoms is bad for everybody else. If kidnappers know, or really just think, that they’ll get paid, they’re more likely to kidnap and hold hostages. It’s not that companies are not solely responsible for their own lax security policies. It’s that incentivizing the exploiting of them is bad for society.