> I don't understand why it's not a crime to have sensitive information on [[vulnerable]] computers (...) Easiest question under the Sun: it's legal and consi

> I don't understand why it's not a crime to have sensitive information on [[vulnerable]] computers (...) Easiest question under the Sun: it's legal and considered perfectly OK because the software, network gear and configuration comes with the right documents. As long as the documents say the right procedures were applied during development and deployment, it's considered OK. What do you expect, particular software and network gear being declared too vulnerable merely because everybody with relevant experience know and have experienced how vulnerable it is? Bureaucracies don't work that way; never did and probably never will. We may want to have a way to counter such useless documents to make our countries' infrastructure safer, but that's not the easiest quest under the Sun anymore...