Re:Unauthorized access to Docker Hub database
by bauerm97 on Monday April 29, 2019 @12:24PM
(#19779792)
> We don't fine banks for being robbed. It's the robbers fault something bad happened, not the bank's.
No, we don't fine banks for being robbed. However, if the bank had clearly insufficient security on their vault, was notified of this being a problem, and made zero efforts to fix the problem then yes they should be held liable.
Re:Unauthorized access to Docker Hub database
by dahfizz on Monday April 29, 2019 @01:08PM
(#19780243)
Isn't that exactly what I stated in my comment?
Re:Unauthorized access to Docker Hub database
by icebraining on Monday April 29, 2019 @01:24PM
(#19780449)
> We don't fine banks for being robbed
The comparison seems specious - the customers of the bank don't lose their money when a bank is robbed. The security is for its own benefit.
Still, your point stands.
> ...the judge noted that Equifax had a duty to safeguard information, failed to heed warnings from the Department of Homeland Security, and “willfully” violated the Fair Credit Reporting Act and state regulations.
IMO, ignoring government warnings and violating regulations is much different than failing to stand up to an attack.
I would be very resistant to making "being hacked" a crime - in almost all cases, the hackee is the victim of an attack. If you feel the need for legal action, we should increase our "anti-hacker" laws and enforcement.
We don't fine banks for being robbed. It's the robbers fault something bad happened, not the bank's.
EDIT: formatting