4 ms·

I mostly agree, but the calculation is different for different businesses. The costs of engineering time and hiring a security professional may be much more ex

I mostly agree, but the calculation is different for different businesses. The costs of engineering time and hiring a security professional may be much more expensive than the lost business due to breaches. In this particular case they likely have enough resources to have made it happen, but it remains to be seen whether this will actually cost them much if anything.

freehunter 12y ago
That was the case with Home Depot. They made the determination that the cost of implementing proper security would be more than the cost of cleaning up the breach. However, this is just offloading the negative externalities onto the banks and the customers. That's just shitty. I'm not one to call for government regulation that easily, but this is exactly why we have a federal government. To make sure the citizens are being protected. That's why the FCC declared ISPs to be utilities. To stop them from abusing the customers. That's why the EPA has regulations on chemical and oil spills. If Home Depot got fined $100m for their breach, what would the cost look like then? The cost of security is more than the impact of the lost business. That needs to be fixed, because until it is, we will continue to have breaches that make our lives terrible.