5 ms·
By the same logic, shouldn’t it be illegal to hand over your wallet if you get mugged? Companies aren’t really paying this money by choice, they are paying it
by Closi 6y ago
By the same logic, shouldn’t it be illegal to hand over your wallet if you get mugged?
Companies aren’t really paying this money by choice, they are paying it because losing systems/data can in some cases result in an inability to operate - otherwise it wouldn’t really be a ransom.
- k_sze 6y agoThe difference is that if you get mugged, your physical safety is being threated. So giving your money to the mugger is reasonably considered defense against bodily harm. I believe that in most randomware cases, nobody's physical safety is in immediate danger (except cases that involve hospital systems or other remote-controlled/networked medical device). I'd say there should be an exception for ransomeware cases where physical safety is being threatened.
- phpnode 6y ago> I'd say there should be an exception for ransomeware cases where physical safety is being threatened. doesn't that incentivise attacks on critical services/systems?
- k_sze 6y agoI don't think so, because critical services/systems are targetted by ransomware operators regardless of the exception. And I don't think the victim should be burdened to decide between losing a life vs paying hefty fines.