3 ms·
The sentiment of your comment is that transparency is somehow generous; and I could not disagree more. As user whose information has been potentially compromis
by victor9000 13y ago
The sentiment of your comment is that transparency is somehow generous; and I could not disagree more. As user whose information has been potentially compromised, i expect nothing less.
- patio11 13y agoYou can expect whatever you want, but the norm in industry is for that sort of information to end up in a silo inside the company, and external exposure to it is permitted only under NDA or equivalent guarantees (e.g. sharing with law enforcement). What you urgently want is a cultural change on behalf of industry. This guy is part of the change you want. Biting his fingers is not the optimal path to accomplishing your goals, even if it is viscerally satisfying.
- toomuchtodo 13y agoPerhaps regulation needs to move from mandatory disclosure when credit card/payment data is leaked/lost to mandatory disclosure when credential data is lost as well. I too want urgent cultural change on behalf of industry; I'll settle for regulation though.
- tptacek 13y agoBe careful what you wish for. Very few practitioners in this industry really understand what kind of regulatory honeymoon they're enjoying right now. Given the impact of the work we do to society, it is kind of a miracle we don't all have to be certified.
- toomuchtodo 13y agoShould we not make more effort to self-govern then? And not think it a gift when someone does a breach post-mortem?
- rmc 13y agoPerhaps regulation needs to move from mandatory disclosure when credit card/payment data is leaked/lost to mandatory disclosure when credential data is lost as well. This is already the case in the EU with the Data Protection Directive.