News for hackers. Stuff that matters.

A comment on Dozens of high-traffic websites vulnerable to ‘account pre-hijacking’, study. Parent comment

Re:Dozens of high-traffic websites vulnerable to ‘account pr... by donclark on Monday May 30, 2022 @08:17PM (#31564967)
This reminds me of credit card fraud and how companies (like VISA) dont seem to care either. As long as they are not held liable for the losses (or it does not cause a drop in users) why would they?

Is there a class-action lawsuit possibility in both cases?

[ Parent | on HN ]
Re:Dozens of high-traffic websites vulnerable to ‘account pr... by quesomaster9000 on Monday May 30, 2022 @09:15PM (#31565238)
IT security is an insurance problem, and the insurers may stipulate you need a pentest, which makes it not their problem and not your problem - just keep paying those premiums and the liability gets passed to the end-user ;)

There is no class-action lawsuit, that's just business...

[ Parent | on HN ]
Re:Dozens of high-traffic websites vulnerable to ‘account pr... by Gigachad on Monday May 30, 2022 @10:15PM (#31565499)
It’s the same in any industry. Try telling the local council they should build a road overpass over a pedestrian crossing because it’s safer and a few people have been hurt there.

What you are saying is true, but it’s unlikely anything will be done because it’s expensive and not a huge risk.

[ Parent | on HN ]
Re:Dozens of high-traffic websites vulnerable to ‘account pr... by refurb on Tuesday May 31, 2022 @08:22AM (#31568694)
What would be your class action lawsuit for credit card fraud? Who are the plaintiffs?
[ Parent | on HN ]