3 ms·
I think the challenge here is figuring out how regulators and insurers can tell the difference between best practices and things like security theater or former
by wpietri 4y ago
I think the challenge here is figuring out how regulators and insurers can tell the difference between best practices and things like security theater or former best practices that are now obsolete but are written into regulations or standards.
Right now there are only ~250 car models available in the US. Each one gets incredible amounts of attention from all sorts of people, both before and after launch. And cars are pretty stable technology. But there's a ton of software out there: 1.8 million entries in Apple's App Store alone. And our tools and technologies are still evolving at a rapid clip. Having to explain each new library to an insurance company functionary sounds like a major brake on innovation to me.
- avg_dev 4y agoMaybe a brake on innovation is a good thing. Social understanding and effective legislation on technological advances lags adoption by quite a long period.
- wpietri 4y agoPossibly, but I think higher security standards may not create the kinds of lag you're looking for there. Adam Neumann and Travis Kalanik are not going to give two shits about IT standards, and even if they did I doubt it would slow down their innovation in business models, ways of dealing with customers, and dealings with government.
- hbrn 4y agoA good example is the password rotation policy. It is still enforced by some of the standards (PCI DSS comes to mind), despite existing research that shows it worsens your security.