2 ms·
That's close to how I arrived at the number - I used programmer wages. Reading about best practices around password storage and implementing it is fairly quick
by im3w1l 2y ago
That's close to how I arrived at the number - I used programmer wages. Reading about best practices around password storage and implementing it is fairly quick and easy, so a fine of that size will still be sufficient incentive.
- Timon3 2y agoBut why would that be an appropriate amount? By having the fine around the lowest possible investment to tackle the issue, you're literally incentivizing companies not to take security seriously. After all, you can save money early into development, and just fix it whenever you have time - you'll still save money compared to doing things right immediately. So again, why would this make sense?