And that's one of the many things that makes security hard: effectively weighing impacts against remediation costs (even measuring impacts is really hard). It a

And that's one of the many things that makes security hard: effectively weighing impacts against remediation costs (even measuring impacts is really hard). It appears Sony did it badly. But I agree with the statement that it doesn't make sense to spend $10m mitigating against a possible $1m loss.