News for hackers. Stuff that matters.
Re:Equifax’s Maddening Unaccountability by ridgeguy on Monday September 11, 2017 @08:49PM (#15223869)
I wonder if the legal concept res ipsa loquitur (the thing speaks for itself) could apply here? It's one foundation of tort law.

The argument would be that the very fact that PII security was breached demonstrates defendant's negligent data storage/security practices. If those practices had been adequate, the breach would not have occurred.

Re:Equifax’s Maddening Unaccountability by cloakandswagger on Monday September 11, 2017 @09:09PM (#15223976)
If that's the case then I'd suggest every software developer on this forum immediately switch careers, this one is doomed.
Re:Equifax’s Maddening Unaccountability by ridgeguy on Tuesday September 12, 2017 @01:49PM (#15229505)
Well, there is that. Maybe reality is that no set of security practices can ever secure PII. If so, that's an even bigger problem than lackadaisical firms like Equifax.

But I think higher expectations, helped along with civil legal machinery that's likely to mete out meaningful punishment, would move us faster to finding out whether the problems are mostly just sloppy practice (which responds to economic penalties) or whether they're more fundamental and need a different fix.