3 ms·

I'm not convinced that it is negative. After every high profile hack or breach, we complain about how organizations regularly get away with poor security practi

I'm not convinced that it is negative. After every high profile hack or breach, we complain about how organizations regularly get away with poor security practices with mere slaps on the wrist (in terms of legal penalties they end up having to pay). Perhaps these ransomware attacks are the market's way of making things... more fair.

yyyk 6y ago
So far, these attacks don't seem to have prompted security improvements. I guess that for large companies, the payment is a small sum, comparable to the fines they pay every once in a while. Security improvements seem to be driven more by regulation (GDPR), competition (when did ElasticSearch release TLS support for free? Not after the Nth open ES cluster - only after Amazon competed with them), and large costs (switching to Linux servers because they're cheaper. Though there are concerns about current security practices there too...).