3 ms·
Imagine: The vulnerable device is on your internal network, and the likelihood of damages is very small. I suppose you can construct a regime in which feds com
by mustache_kimono 3y ago
Imagine: The vulnerable device is on your internal network, and the likelihood of damages is very small.
I suppose you can construct a regime in which feds come in a fine you simply for having an insecure device, but a lighter touch approach is to wait for damages, which given this scenario, perhaps never comes.
- bee_rider 3y agoI think I might not have been totally clear. If you’ve been sold a vulnerable device, you are the victim. You have to replace the device. The damage is to you, the one who did the damage is the company that sold you a defective device. They should pay to replace the functionality, and some punitive fine, as a start. Then we can get into whatever damage their negligently designed device did (did it participate in a DDOS? Did it attack other devices on your network?)
- mustache_kimono 3y ago> If you’ve been sold a vulnerable device, you are the victim. Ahh. Simply having to replace a defective device would be "damages". The only Q would be: Was it reasonable to replace given the threat?
- bee_rider 3y agoI’ve edited it, hopefully for clarity :)