Re:Repositories held for ransom by using valid credentials
by asdfasgasdgasdg on Saturday May 04, 2019 @11:59AM
(#19827239)
The criminal code? I doubt there's anything in there that criminalizes a failure to follow an employer's secret revocation policies.
[ Parent
| on HN ]
Re:Repositories held for ransom by using valid credentials
by trickstra on Saturday May 04, 2019 @12:22PM
(#19827387)
No, I wasn't referring specifically to this case. Generally, if people don't "follow the protocol", we have criminal code. If machines don't follow protocol, they end up with wrongly decrypted garbage data. It was to highlight the point that we have different measures to deal with people than we have with computer security, because math cannot prevent people from deviating from their protocols.