3 ms·
> people's shit Is the key term here. What counts as people's shit? If I, as a customer of a company, find out my shit (lets say personal information) is inse
by rurounijones 11y ago
> people's shit
Is the key term here. What counts as people's shit? If I, as a customer of a company, find out my shit (lets say personal information) is insecure because a security researcher investigated a security flaw in a company's API: Is that ok?
This gets even more blurred when lets say my shit (house) is in imminent threat of destruction because the chemical plant 1 mile away can easily be explosively sabotaged remotely, releasing toxic chemicals, due to shoddy SCADA security. Don't I and my shit deserve to be protected?
We are getting into the whole "Greater good / public interest" here where such a simple definition as you specified is no longer applicable I think.
- npizzolato 11y agoIn the same way a chemical plant might be required to enforce certain physical security requirements, it seems reasonable they might be required to enforce certain digital security requirements. But that's for legislation and government audits to determine, not random people breaking in or hacking in.
- rurounijones 11y agoI think governments (and humanity in general) are MUCH better at physical security that digital. The idea that government regulations could cover digital security is something that I do not believe possible. The whole history of SCADA is a pretty good example.