News for hackers. Stuff that matters.
Re:Germany: 'Colossal' cyberattack knocks out Funke news group by orf on Tuesday December 29, 2020 @03:09PM (#25574222)
> But it's a dishonest analysis that ignore the threat actor (a criminal in this case - let's not mince words) who exploits the vulnerability.

If I leave my ground floor window open with cash sitting just inside and someone reaches in and steals it, that's my fault. It's dishonest to suggest that dishonest actors don't exist or are anything other than a fact of life/force of human nature.

As such they don't bear much discussion - I left the window open. That's on me.

Re:Germany: 'Colossal' cyberattack knocks out Funke news group by buran77 on Tuesday December 29, 2020 @03:26PM (#25574449)
Not all exploits are due to negligence or at least not crass negligence. Sure, something may have been forgotten (although the present article says nothing about this), systems are complex and as the "defender" you only have to make one mistake. But your "it's on me" is very much victim blaming unless you can show a pattern of intentional ignorance or malfeasance within a network.

I can get in your house even if you close the window. It's a window and can be opened. Are you still to blame? I can look for money even if you hide them, I'll search around. Are you still to blame? You could have taken the precaution of not having money in the house or at least not living on the ground floor if you do.

Many attacks are 0day, many others are supply chain attacks, many exploit the weakest of links, the human. There's a limit to how much you can protect yourself from one attack in an instant before you cause yourself harm slowly but continuously. No matter how many locks you put you're not guaranteeing anything. It's a calculated risk and sometimes the calculation doesn't pay off.

Re:Germany: 'Colossal' cyberattack knocks out Funke news group by zo1 on Tuesday December 29, 2020 @03:17PM (#25574319)
You blame yourself, sure. "It's on you". But the other person committed a crime, and that's separate to your view on the matter.
Re:Germany: 'Colossal' cyberattack knocks out Funke news group by FeepingCreature on Tuesday December 29, 2020 @03:19PM (#25574363)
The fact that the attacker committed a crime and carries sole blame does not absolve you from your responsibility to secure your belongings.
Re:Germany: 'Colossal' cyberattack knocks out Funke news group by heavenlyblue on Tuesday December 29, 2020 @03:23PM (#25574408)
Not every crime means businesses are not liable for the results of their negligence. If the business does not provide the reasonable means for dealing with fraud it’s their responsibility in front of the law for the result of given fraud.
Re:Germany: 'Colossal' cyberattack knocks out Funke news group by Juliate on Tuesday December 29, 2020 @03:22PM (#25574390)
No. That was not thoughtful of you given the threat model. But the fault is always, _always_ on the one who commits the crime.

Claiming the contrary is exactly victim blaming.

Re:Germany: 'Colossal' cyberattack knocks out Funke news group by AnimalMuppet on Tuesday December 29, 2020 @03:30PM (#25574523)
The moral fault is always on the perpetrator. Always.

But in a world that contains muggers, and that you know contains muggers, walking around the bad part of town with cash visibly hanging out of your pocket is not very wise. It's not a moral failure, but it is a failure of common sense and reasonable prudence.

Re:Germany: 'Colossal' cyberattack knocks out Funke news group by Juliate on Wednesday December 30, 2020 @04:18AM (#25580037)
We're saying exactly the same thing, but well...
Re:Germany: 'Colossal' cyberattack knocks out Funke news group by orf on Tuesday December 29, 2020 @03:35PM (#25574579)
_always_ finding fault with the one who commits the crime is as pointless as finding fault with a hurricane for destroying your property, or the sea for drowning you without an oxygen tank.

In the case of murder, sure. But I'm with you. But bad actors (in the form of petty theft, exploitation, confidence tricks, etc) are a fact of life. Failing to account for them, just as failing to account for hurricanes if you live in hurricane alley, is completely on you. You can reduce that down to a blanket "but you're just victim shaming!" if you'd like, but it doesn't make it any less true.