4 ms·

I’ve been wondering this too. Extortion and terrorism seem similar in many ways except the latter involves physical harm. I’d asssume a company paying money t

I’ve been wondering this too. Extortion and terrorism seem similar in many ways except the latter involves physical harm. I’d asssume a company paying money to terrorists shouldn’t be acceptable. It also seems especially egregious to pay ransom as a “solution” to the failings that made the attack both possible and consequential in the first place. Might as well use a bank whose safe deposit boxes are made of cardboard… They can just bribe the thieves to give some things back.

protocolture 5mo ago
>It also seems especially egregious to pay ransom as a “solution” to the failings that made the attack both possible and consequential in the first place. You are paying an extra fee for not testing your own software and infrastructure. It was instead tested by a third party. Be glad it wasn't tested by a nation state actor or someone who wanted to do more harm to your customers than just asking for money. Ideally they should now secure their infrastructure and take this as a gentle reminder that they should spend more on security. >Might as well use a bank whose safe deposit boxes are made of cardboard… They can just bribe the thieves to give some things back. You would hope they would then upgrade the cardboard.
- erikerikson 5mo ago
  When you frame it like that it sounds like the thieves are doing us a favor. Except it should be heavily fined and jailable for the entire executive team and maybe the board too.
  - protocolture 5mo ago
    The thieves are doing us a favor. And yes, the companies executive should be jailed.
    - erikerikson 5mo ago
      Except those payments are being passed through, are they not?
      - protocolture 5mo ago
        Passed through where and how?
        erikerikson 5mo ago
        Canvas to schools to tax payers
        protocolture 5mo ago
        Ah yep, well they might pass on as much of the cost as they can to their customers, but it still costs them in lost customers/prestige etc.

protocolture 5mo ago

>It also seems especially egregious to pay ransom as a “solution” to the failings that made the attack both possible and consequential in the first place. You are paying an extra fee for not testing your own software and infrastructure. It was instead tested by a third party. Be glad it wasn't tested by a nation state actor or someone who wanted to do more harm to your customers than just asking for money. Ideally they should now secure their infrastructure and take this as a gentle reminder that they should spend more on security. >Might as well use a bank whose safe deposit boxes are made of cardboard… They can just bribe the thieves to give some things back. You would hope they would then upgrade the cardboard.

erikerikson 5mo ago
When you frame it like that it sounds like the thieves are doing us a favor. Except it should be heavily fined and jailable for the entire executive team and maybe the board too.
- protocolture 5mo ago
  The thieves are doing us a favor. And yes, the companies executive should be jailed.
  - erikerikson 5mo ago
    Except those payments are being passed through, are they not?
    - protocolture 5mo ago
      Passed through where and how?
      - erikerikson 5mo ago
        Canvas to schools to tax payers
        protocolture 5mo ago
        Ah yep, well they might pass on as much of the cost as they can to their customers, but it still costs them in lost customers/prestige etc.