Sad reality: It's cheaper to get hacked than build strong IT defenses

Re:Sad reality: It's cheaper to get hacked than build strong... by Godel_unicode on Friday September 23, 2016 @07:07PM (#12568573)

So you think that startups with hockey-stick growth should have to design systems which are impervious to extremely sophisticated criminals? That seems unlikely.

Edit: also, the main risk here is password reuse. How is Yahoo supposed to estimate that and why are they on the hook for user's bad security practices?

[ Parent | on HN ]

Re:Sad reality: It's cheaper to get hacked than build strong... by mikeash on Friday September 23, 2016 @07:32PM (#12568654)

I'm not sure how "mandatory liability insurance" gets translated into "have to design systems which are impervious."

[ Parent | on HN ]

Re:Sad reality: It's cheaper to get hacked than build strong... by cwillu on Sunday September 25, 2016 @11:47PM (#12579087)

You're forced to spend money to mitigate losses. If you can do something to decrease the losses, or the likelyhood of suffering one, then the insurance will cost less.

[ Parent | on HN ]

Re:Sad reality: It's cheaper to get hacked than build strong... by mikeash on Monday September 26, 2016 @09:41AM (#12581708)

Right, so your spending will increase up to the point where your ROI is 1:1, then you'll stop. That point will be long before you reach imperviousness.

[ Parent | on HN ]