> And if they don't comply with that... How are they going to find out? Are they mandating source code & database audits? If it took them 4 years to take acti

> And if they don't comply with that... How are they going to find out? Are they mandating source code & database audits? If it took them 4 years to take action on something that was pushed in every web user's face several times per day, you're probably looking for a few millennia for them to take action on something only a few hundred company insiders are aware of.