4 ms·
They're entirely responsible for the damage that was inflicted. Attempting to shift the blame to you is childish at best.
by Twirrim 11y ago
They're entirely responsible for the damage that was inflicted. Attempting to shift the blame to you is childish at best.
- _pdp_ 11y agoMaybe, but there is such thing as responsible disclosure.
- vacri 11y agoThis is a victim-blaming myth. The prime responsibility for the damage is the person who did the damage. Not the discloser, and not the victim.
- alex_anglin 11y agoMaybe, but running unauthenticated databases on the public internet is negligent at best.
- latch 11y agoNo. It could be simple ignorance. Or an accident. In your world, what is it at worst? Criminal? Capital?
- alex_anglin 11y agoAgreed that it could be either of those things. I'm not trying to excuse criminal behavior at all, rather stating that if one puts an unauthenticated database on the internet, it's going to be compromised. For software professionals, my opinion is that to do so would be negligent.
- mentat 11y agoAn ignorance is an excuse for compromising your company or customer's data in exactly what situations? Let's just all cover our eyes and not look, then the data will be safe I'm sure.
- threatofrain 11y agoOf course it depends on the context. I don't know if it's reasonable to expect a small family clinic, therapist, or dental office to secure their client information. It seems that people just mass scan the internet looking for already known vulnerabilities. However, if it's a mid-sized business handling important information, like payment information, then I do think there ought to be a standard of dutiful behavior, because otherwise who pays for the externalities?
- vacri 11y agoIt could also be leftover testing systems that haven't been torn down yet, with nothing interesting in them. The internet is full of them.
- SamReidHughes 11y agoWhy shouldn't we blame victims too? Should we not blame victims of shark attacks that swim in shark-infested waters?
- vacri 11y agoHave another go at interpreting my comment.
- deleted 11y ago[deleted]