undefined | Better HN

0 pointsshakna1y ago0 comments

It's often a violation of both government laws and insurance contracts, if you knowingly expose that much financial information to a proven vulnerability.

There are businesses where if you suffer a theft, you shut everything down and run a stocktake. For example, an arms dealer. And there are times credit card providers shut down - because there is a known vulnerability, and they have to immediately mitigate, or lose their insurance.

0 comments

jessriedel1y ago

Ok, but shutting down the website because of legal/moral responsibility to protect customer info is very different than doing so because of the “real money involved”, which is what commenter dewey was responding to. You can choose to just take the fraud cost hit in the latter case.

lazyasciiart1y ago

That's why people aim for the legal costs to be commensurate with the possible gain they will miss out on. Many corporate penalties are small enough that mathematically, it's absolutely worth simply breaking the law all the time.

j / k navigate · click thread line to collapse

0 comments

jessriedel1y ago

lazyasciiart1y ago

j / k navigate · click thread line to collapse