3 ms·
Another fun idea via someone on Twitter: make randomware legal but capped at a low amount, e.g., $5k. (And, perhaps, public reporting required after a 1 year de
by jessriedel 5y ago
Another fun idea via someone on Twitter: make randomware legal but capped at a low amount, e.g., $5k. (And, perhaps, public reporting required after a 1 year delay.) Now white hats can enter the market safely, many holes are discovered for relatively low prices, and the country's tech infrastructure as a whole is less vulnerable to serious attack.
One issue is that if the costs of finding different vulnerabilities are distributed along a spectrum, this only lets you find the <$5k ones.
- nexuist 5y agoThe problem is ransomware is software just like all the others. What do you do when some random script kiddie in way over their head manages to encrypt a seriously important network but can't develop decryption tools - or worse, loses the encryption key? Nobody really wants to promote unsophisticated attackers in this space. At least the existing criminals give you proven tools once you pay the ransom.