News for hackers. Stuff that matters.
Re:Woman dies during a ransomware attack on a German hospital by umvi on Friday September 18, 2020 @04:17PM (#24521436)
> Two things can be true at the same time

Heck, three things can be true at the same time. For example, in the Uber self-driving car death:

- uber's safety systems failed to recognize a human in the road

- the backup human driver failed to pay attention

- the woman in the middle of the street failed to pay attention

There can be N failures that all contributed to a given disaster, and it's important to consider all points of failure which can be mitigated in the future, not just the most controversial point of failure.

Re:Woman dies during a ransomware attack on a German hospital by senderista on Friday September 18, 2020 @05:04PM (#24521874)
I believe there's still another failure: Uber's systems didn't ensure that the backup driver was paying attention, when it was highly foreseeable that their attention would lapse (although granted watching a show on your phone is more than a lapse of attention).
Re:Woman dies during a ransomware attack on a German hospital by tolbish on Friday September 18, 2020 @06:38PM (#24522526)
Why stop at three? What about Arizona's lawmakers for allowing this in the first place, or not demanding that certain safety measures are met?
Re:Woman dies during a ransomware attack on a German hospital by kolbe on Friday September 18, 2020 @07:00PM (#24522689)
Careful. If you think about this too much, you might end up realizing how absurd “justice” systems everywhere are.

Maybe say everything has one cause: the initial conditions on the differential equation that governs all existence.

Re:Woman dies during a ransomware attack on a German hospital by CryptoPunk on Friday September 18, 2020 @09:48PM (#24524123)
That assumes that the state has a responsibility to micro-manage every activity, with prohibitions on activity that doesn't follow the prescribed regiment, to prevent negligence.

The individuals involved in an activity are the only ones responsible for avoiding negligent behavior in a society based on the liberal democratic principles of individual rights and responsibilities.

However, to give due credit to your musing, the Uber situation is somewhat different in being on public roads, which lawmakers do have some responsibility to govern an individual's use of, for the safety of others who share public roads with the individual.

Re:Woman dies during a ransomware attack on a German hospital by tolbish on Friday September 18, 2020 @09:59PM (#24524193)
We allow the state to micromanage the activities of individuals all the time, such as with drug, prostitution, and porn laws.
Re:Woman dies during a ransomware attack on a German hospital by patrickthebold on Friday September 18, 2020 @09:06PM (#24523792)
Or even the voters for voting for said lawmakers.
Re:Woman dies during a ransomware attack on a German hospital by acrefoot on Friday September 18, 2020 @07:15PM (#24522781)
I learned recently this is sometimes visualized by something called the "Swiss Cheese Model": https://en.wikipedia.org/wiki/Swiss_cheese_model

Regarding self driving cars: I was once told that a big reason for the safety of fly-by-wire systems (when planes first moved from directly attached controls) is that the engineers who built those systems had to take the first flights, so they made sure their systems were good. That is probably the case for self-driving cars too, but falling out of the sky feels more viscerally unsafe than driving on a highway, and the gradual nature of the changeover probably isn't helping either.

Re:Woman dies during a ransomware attack on a German hospital by devonkim on Saturday September 19, 2020 @12:04PM (#24528382)
This is the reason for “root cause analysis” being obsolete and against best practices for complex systems. The practice seems to be something that less sophisticated management wants for a political scapegoat rather than to actually solve problems.
Re:Woman dies during a ransomware attack on a German hospital by pooper on Friday September 18, 2020 @04:30PM (#24521583)
> There can be N failures that all contributed to a given disaster, and it's important to consider all points of failure which can be mitigated in the future, not just the most controversial point of failure.

For the Uber thing, what incentive does the management have to do the right thing?

Re:Woman dies during a ransomware attack on a German hospital by nickff on Friday September 18, 2020 @04:45PM (#24521728)
Money damages, potential criminal lawsuits, and reputational harm which is real and costly (though I know HN is skeptical of it).
Re:Woman dies during a ransomware attack on a German hospital by Twirrim on Friday September 18, 2020 @05:34PM (#24522109)
> reputational harm which is real and costly (though I know HN is skeptical of it).

Largely because the world keeps demonstrating that reputational harm just doesn't happen to large companies. Uber included in this particular case.

Here's the Uber trips per quarter (in millions) since Q2 2017 (source https://www.businessofapps.com/data/uber-statistics)

Q2 2017 889

Q3 2017 985

Q4 2017 1,088

Q1 2018 1,136

Q2 2018 1,242

Q3 2018 1,348

Q4 2018 1,493

Q1 2019 1,550

Q2 2019 1,677

Q3 2019 1,770

Q4 2019 1,907

Q1 2020 1,658

The probable reason for the Q1 dip was the pandemic. The number of riders just keeps on rising.

You can see the same with Target etc. Large breaches happen, major negative incidents, and at best you might see a blip. The large majority of people just don't give a shit, so companies are given permission to not give a shit either.

Re:Woman dies during a ransomware attack on a German hospital by pintxo on Friday September 18, 2020 @05:00PM (#24521846)
Funny that being ethical and prioritizing to not do harm is not on the list.
Re:Woman dies during a ransomware attack on a German hospital by nickff on Friday September 18, 2020 @05:08PM (#24521893)
'Prioritizing to not do harm' is an ethical consideration, and ethics are subjective, so I didn't consider them 'incentives'. If the question had been about 'motives' or 'considerations', I would have included 'potential ethical beliefs'.
Re:Woman dies during a ransomware attack on a German hospital by warent on Friday September 18, 2020 @05:17PM (#24521963)
The reason why is that presenting facts and concrete logic is more compatible with a greater array of people, whereas ethics and morals are subjective. Using a moral argument is not going to be as persuasive in business (particularly if, generally speaking, leadership is largely comprised of sociopaths, which is just a reality of this world)
Re:Woman dies during a ransomware attack on a German hospital by pintxo on Saturday September 19, 2020 @06:01AM (#24526349)
Thats pretty much what I meant with "funny".