News for hackers. Stuff that matters.
Re:US passes emergency waiver over fuel pipeline cyber-attack by JackFr on Sunday May 09, 2021 @10:11PM (#27101972)
> The US Gov should make it clear, if you are a critical service and if your service drops due to items being on the internet, for each occurances 10% of your total revenue (including your parent companies) are forfeited.

Make it a crime to pay the ransom in a ransomware attack.

Make it a crime to fail to report a ransomware attack in a timely manner.

Ransomware attacks (and companies with poor security practices) will go away.

Re:US passes emergency waiver over fuel pipeline cyber-attack by clarkmoody on Sunday May 09, 2021 @10:29PM (#27102085)
Make it a crime to possess, consume, or distribute substances that are bad for people.

Make it a crime for people to knowingly withhold information about such activities from the authorities.

Abuse of substances, trafficking, and associated criminality will go away.

But seriously...

> Make it a crime to pay the ransom in a ransomware attack.

Ok, so ... what should a company do? File a report with some government agency or with an insurance company and wait until the bureaucratic process maybe results in being able to pay the ransom to resume business operations? Punishing the victim of a crime? Really?

> Make it a crime to fail to report a ransomware attack in a timely manner.

Further punishing the victim of a crime? Really?

> Ransomware attacks (and companies with poor security practices) will go away.

lol

Re:US passes emergency waiver over fuel pipeline cyber-attack by JackFr on Sunday May 09, 2021 @11:51PM (#27102511)
I don’t see an analogy to drug laws. Is your point simply that such a law is impractical to enforce?

Paying extortionists begets more extortion. The only argument I’m seeing is a bunch of hand waving and people telling me I’m being hopelessly naive. I don’t think I am.

Re:US passes emergency waiver over fuel pipeline cyber-attack by wutXthree on Monday May 10, 2021 @01:04AM (#27102884)
There is already a law. It's called misprison of felony.
Re:US passes emergency waiver over fuel pipeline cyber-attack by wutXthree on Sunday May 09, 2021 @10:14PM (#27101990)
>Make it a crime to fail to report a ransomware attack in a timely manner.

You mean like "18 U.S. Code § 4 - Misprision of felony" [0]?

[0] https://www.law.cornell.edu/uscode/text/18/4

Re:US passes emergency waiver over fuel pipeline cyber-attack by hanniabu on Sunday May 09, 2021 @10:14PM (#27101988)
Just like all other laws that companies break, they'll just get a slap on the wrist and continue their ways