Hacker News Reader

"Not negotiating with terrorists" is mostly a myth. Everyone from the US to Israel to the UK negotiates with terrorists:

The downward trend in bug bounty payouts and frustration from researchers might also sweeten that deal for more experienced persons.

Companies which fall victim to such attacks aren't normally the kind which have bug bounties or engage with security researchers.

They're running software sold by companies that do.

If they treat them as terrorists, then paying a ransom is funding terrorists. Which is how it it should be treated.