Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by nradov | Hacker News Reader

Parent Full thread

nradov·

That's fine, those are acceptable casualties. Make paying any sort of ransom a criminal offense.

View on HN

You know what's an even more acceptable casualty that would greatly reduce ransomware? Cryptocurrencies.

Sounds impossible to enforce.

The penalty for not paying is often catastrophic. The penalty for paying will have to be similarly impactful.

Right, make the penalty for paying a ransom catastrophic. Very few employees will risk a criminal conviction and years in federal prison just to protect their employer.

It's all fun and games until it's your livelihood at stake, and then it makes a lot more sense to acquiesce, lick your wounds, and keep your business alive.

Getting hacked is no fun, but companies don't deserve to die because something in their tech stack was vulnerable.

Nah, those companies deserve to die. Let them fail. Creative destruction.

I respectfully disagree - I do agree that the natural financial death of a company probably shouldn't result in bailouts, but if I as a company get breached because my fully-updated, follows-best-practices Windows Domain got hacked because of a vulnerability in Microsoft's stuff? That's hardly fair.

Shouldn't I be able to sue Microsoft for financial relief?

That is an acceptable outcome. Life isn't fair. Companies fail all the time for a variety of unfair reasons. This will force customers to demand that Microsoft and other software vendors improve their own security practices and/or indemnify customers for damages from breaches. You can sue Microsoft for financial relief if they breach your contract.

Reply on news.ycombinator.com