> It's simple thuggery No, it's not, and this is where your approach and mine differ. You're trying to speak as though your audience is "people who might be en

> It's simple thuggery No, it's not, and this is where your approach and mine differ. You're trying to speak as though your audience is "people who might be encouraged to write something like this"; I'm speaking as though my audience is "potential victims who might underestimate the danger of CryptoLocker". People, especially technically savvy people, constantly overestimate their ability to avoid problems like this. Every time there's a popular thread about malware on Reddit, there will be popular comments along the lines of, "I don't know how other peasants get infected with stuff like this, all you have to do is (not click on the wrong things online || run my favorite software || use an ad-blocker || use Linux || use MacOS || only browse the web on Wednesdays)". That is the kind of mindset I have to regularly defeat in order to get people to take sensible precautions, like having backups, and CryptoLocker is the one piece of malware out there that I can effectively use against that mindset, because I can point to my highly technical business customers (with current enterprise-class AV and ad blockers and Chrome/Firefox and and and...) that have been hit by it, I can point to news articles like this one about governmental agencies paying the ransom after being hit by it, I can use it to scare a few over-confident people into doing the thing they should have done all along to utterly defeat CryptoLocker: get a good backup system. Frankly, the best thing that could happen, in the long run, would be for half a dozen people on HN to go, "Oh, that thaumaturgy, he thinks CryptoLocker is cool, now I'll write a clone of it too," because, after the initial horror and pain of data loss and suffering that many people would be subjected to, suddenly backup software would be one of the most popular projects in the computer industry, instead of being the totally unsexy project that nobody really wants to bother working on, and my job would go from, "let me spend 2 hours trying to convince you to listen to reason and spend money on a mediocre backup system" to "here's the really great all-in-one backup system that you already know you need, call me if you need anything else". Your approach doesn't convince anyone that CryptoLocker is a threat they should take seriously. My approach is consciously intended to protect people from their own bad judgement.