Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by miohtama on Thursday May 13, 2021 @06:23PM
(#27148249)
“Too big to fail” and investors do not get hurt.
The problem does not fix itself until the investors start truly losing money, the care, unlike the Equifax case. Until the portfolio value cannot go down 90% there is not going to be a change in corporate actionism.
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by rawtxapp on Thursday May 13, 2021 @11:50PM
(#27150494)
They are starting to lose money, it's 5M$ today, who knows what it'll be tomorrow or how often it's going to happen.
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by mensetmanusman on Thursday May 13, 2021 @09:31PM
(#27149620)
Do corporations defend their factories with their own weapons?
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by creaghpatr on Friday May 14, 2021 @07:40AM
(#27153141)
Biggest global companies definitely have their own mercenaries on retainer. But that’s mostly for international operations on continents like Africa.
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by R0b0t1 on Friday May 14, 2021 @01:07AM
(#27150917)
Well, they can. Interesting thought.
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by erosenbe0 on Thursday May 13, 2021 @08:34PM
(#27149257)
Agree. The govt need not provide the teams as they must compete for talent like anyone else and don't have much to spare.
The govt only has a relative abundance of talent [largely interspersed with its contractors] in highly regulated activites like making nuclear weapons, where private entities don't participate.
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by fiter on Friday May 14, 2021 @12:27AM
(#27150685)
One of the functions of the government is to educate and train its population. I think using that function could resolve the shortage or high cost of talent.
Re:Colonial Pipeline Paid Hackers Nearly $5M in Ransom
by dredmorbius on Thursday May 13, 2021 @07:14PM
(#27148678)
Self-regulation doesn't.
What happened to the responsibility of corporations for corporate security? Including corporations that are the victims of attacks, and corporations that sell buggy operating systems and applications?
Why does the government have to provide the red teams? The general attitude is all government agencies are wasteful and incompetent, except in this circumstance where the wealthiest corporations in the history of the world apparently can't spend enough to fix their own crap. But the government not only can but should??
This just sounds like externalizing costs to the public while banking record private profits.
How about rather than subsidizing software corporations we talk about liability laws and fines, like any other physical industry that releases dangerous, broken products. Or an insurance system that is funded by a portion of the profits the software industry makes. Then we're actually making the software vendors feel some pain which will incentivize them to release higher quality code.