3 ms·

I haven't given my email address to any websites that are involved with pornography or other disreputable things, nor have I given my email to any website with

I haven't given my email address to any websites that are involved with pornography or other disreputable things, nor have I given my email to any website with connections to illegal activities. The number of leaks with my specific email address doesn't really matter. The point here is that there are thousand and thousands of data breaches happening all the time. These all affect real people. These all have wronged people, and these people have no redress. Your gut reaction of "there's a problem, let's criminalize" seems to match the general consensus here in the USA. We'll criminalize and jail endlessly, but it's not working, the problem is getting worse, more data breaches happen all the time, airlines cancel all flights, hospitals cancel medical procedures, all because we can't build secure IT systems. The problem keeps getting worse despite our criminalization. One thing we wont try is expecting competence and accountability (financial liability) from our wealthy and powerful organizations. Nor will we try empowering upstanding security researchers, and meanwhile criminal hackers continue to act with no regard for the law.

taeric 2y ago
Where did I give my gut reaction? It would almost certainly be more inline with finding processes to improve things. I'm all for pen tests and similar. Bounty programs are also good ideas. The topic here, though, was whether or not casing out a location would get you in trouble. And, yeah, if you are casing out a place you can get in trouble. Regardless of how much crime has or has not happened there. Indeed, I would stipulate you are less likely to get in trouble if you are checking out a place that has not had crime. And apologies if you thought I was blaming you on the leaks. Not my intent, at all. Genuinely surprised to hear you get 3,000+ hits. Moreso with how few hits I get, relatively.
- Buttons840 2y ago
  I apologies as well. It's easy to argue against comments as though they're all from one person, even though they come from different people. You say the topic here is whether or not casing out a location would get you in trouble. This illustrates a problem with analogies, we are now several comments deep in a discussion about an analogy. I original spoke about the security of virtual IT systems, and an analogy was made to the security of physical buildings. A computer program and a physical building are quite different, but here we are talking about physical buildings. I don't want to talk about the security of physical buildings anymore.
  - taeric 2y ago
    Totally fair! In discussions this big, I often do not try and speak to multiple threads at the same time. If only to dodge this sort of confusion. My specific entry to the thread was to say that you are likely to get in trouble if you try the door of a bank and walk on in if it is open.

taeric 2y ago

Where did I give my gut reaction? It would almost certainly be more inline with finding processes to improve things. I'm all for pen tests and similar. Bounty programs are also good ideas. The topic here, though, was whether or not casing out a location would get you in trouble. And, yeah, if you are casing out a place you can get in trouble. Regardless of how much crime has or has not happened there. Indeed, I would stipulate you are less likely to get in trouble if you are checking out a place that has not had crime. And apologies if you thought I was blaming you on the leaks. Not my intent, at all. Genuinely surprised to hear you get 3,000+ hits. Moreso with how few hits I get, relatively.

Buttons840 2y ago
I apologies as well. It's easy to argue against comments as though they're all from one person, even though they come from different people. You say the topic here is whether or not casing out a location would get you in trouble. This illustrates a problem with analogies, we are now several comments deep in a discussion about an analogy. I original spoke about the security of virtual IT systems, and an analogy was made to the security of physical buildings. A computer program and a physical building are quite different, but here we are talking about physical buildings. I don't want to talk about the security of physical buildings anymore.
- taeric 2y ago
  Totally fair! In discussions this big, I often do not try and speak to multiple threads at the same time. If only to dodge this sort of confusion. My specific entry to the thread was to say that you are likely to get in trouble if you try the door of a bank and walk on in if it is open.