Re:Marketing Firm Exactis Leaked a Personal Info Database wi...
by axaxs on Thursday June 28, 2018 @11:37PM
(#17422218)
That's a defeatist attitude. If you make companies liable for this, they'll start paying more attention to security. I'm not a trained security expert, but did have to explain this year why not to store plain text passwords in a database. Security is seen as secondary to product across the board. We need penalties to change this.
Re:Marketing Firm Exactis Leaked a Personal Info Database wi...
by hodgesrm on Friday June 29, 2018 @12:33AM
(#17422439)
It's definitely solvable. You pass laws that make it very costly for businesses to expose personal data. Businesses are rational actors (for the most part) and will adjust accordingly, for example by not collecting the data in the first place.
Re:Marketing Firm Exactis Leaked a Personal Info Database wi...
by shakna on Thursday June 28, 2018 @11:58PM
(#17422303)
We can't prevent builders and architects from making mistakes either, but they are required to comply with regulations, and take out insurance to cover their customers in the event of human failure.
If the problem is inevitable on some level, then why isn't insurance to cover that eventuality required?
You can't stop data loss until you can guarantee platform security. You can't do that until you prevent developers from creating bugs and security flaws in the first place. You can only do that unless you have either perfect tools to catch all the issues or a perfect testing regime.
It's basically an unsolvable problem.