> Some people are going to prison, some other people are going to start taking infrastructure security more seriously... Can you point to evidence that this ha

> Some people are going to prison, some other people are going to start taking infrastructure security more seriously... Can you point to evidence that this has happened as you state it will? There's decades of stuff being impacted by various cybersecurity vulnerabilities, and I'm not aware of anyone going to jail over it (defenders claim Act of God, attackers are in some country without extradition treaties and can't be identified anyway, or just pay off the local government to protect them). I'm also not aware of much of anything in the way of actually fixing the problems. Ask anyone who has done any red teaming at any level how often the bugs get fixed, and how often the report is filed away with a nice "Thank you for meeting our checkbox of having been red teamed, here's your check." And the same configurations are in play 5 years later. Keep your old notes, they may be useful! > This is exactly how our brittle infrastructure gets fixed in the best imaginable way. I'll bet it doesn't.