3 ms·
Once companies are held accountable for the weapons and whatever else the money they paid in ransom gets spent on, things will finally change. Until then, we us
by ksaj 2y ago
Once companies are held accountable for the weapons and whatever else the money they paid in ransom gets spent on, things will finally change. Until then, we use the word "victim" with too much lenience. The secondary victims, the ones getting bombed, or the ones that will be targeted and threatened with the nukes that just got paid for with the ransom money, shouldn't be left out of the equation as they have been thus far.
I'm sure some people don't like that way of thinking, but where else do you think one spends $22mil per "victim"? $30 billion a year buys a lot more than fancy clothes and yachts.
- cuu508 2y agoHow would holding companies accountable look? If you pay x amount as ransom, you must also pay x * some_multiplier as a fine, something like that?
- Yossarrian22 2y ago50 years in jail for everyone involved in approving the payment.
- halfcat 2y agoLet’s be realistic about this. A company can’t pay a ransom if they don’t have customers. Life sentences for all customers of businesses is the only effective path.
- yabatopia 2y agoAnd the death penalty for the engineer who didn’t patch a vulnerability or the software developer who wrote the buggy code. That will teach them! Judge Hindsight is ready to punish the victims. Hacks happen. Where starts or ends someone’s responsibility? Where stops the buck? Can we really expect that every layer in an organization is always fully aware of security and security risks, even unknown vulnerabilities? Security practices change over time. Not so long ago 12 character passwords were considered safe, 2FA didn’t exist, … I don’t think that harsher punishments and victim blaming is the way to go.
- BriggyDwiggs42 2y agoNukes? Not to hyperfixate lol i get your point but whyd you throw that in there?
- sanswork 2y agoI'm guessing because a lot of the ransom orgs are Russian with obvious ties to power.
- ElFitz 2y agoIt could work if we’re talking state-sponsored hackers. North Korea is well-known for that, although I’m not sure about ransomware, and I wouldn’t be surprised if Russia were into it too now.
- Ekaros 2y agoWhy not hold tax payers responsible as well?
- NoMoreNicksLeft 2y agoAt that point, the government is holding taxpayers ransom until they fix the ransomware problem. "Stop this or pay more taxes...er, fines."