News for hackers. Stuff that matters.

A comment on US travel firm $4.5M ransom negotiation open chat. Parent comment

Re:US travel firm $4.5M ransom negotiation open chat by enraged_camel on Sunday August 02, 2020 @10:35PM (#24033675)
I'm not convinced that it is negative. After every high profile hack or breach, we complain about how organizations regularly get away with poor security practices with mere slaps on the wrist (in terms of legal penalties they end up having to pay).

Perhaps these ransomware attacks are the market's way of making things... more fair.

[ Parent | on HN ]
Re:US travel firm $4.5M ransom negotiation open chat by yyyk on Sunday August 02, 2020 @10:51PM (#24033763)
So far, these attacks don't seem to have prompted security improvements. I guess that for large companies, the payment is a small sum, comparable to the fines they pay every once in a while.

Security improvements seem to be driven more by regulation (GDPR), competition (when did ElasticSearch release TLS support for free? Not after the Nth open ES cluster - only after Amazon competed with them), and large costs (switching to Linux servers because they're cheaper. Though there are concerns about current security practices there too...).

[ Parent | on HN ]