The standard "we take security very seriously" is starting to ring a bit hollow.
Panerabread.com leaks millions of customer records
31–40 of 153 posts
Re: Panerabread.com leaks millions of customer records
#32Earlier quoted context omitted.
Don’t forget, “We’re sorry,” “We’ll do better,” and my personal favorite, “Trust us!” I’d prefer crippling fines.
"I’d prefer crippling fines" Probably won't happen until some Senator gets personally burned. Equifax hasn't suffered much, for example, and they released almost all of their info for every adult in the US that ever used a credit card or had a mortgage. I'm almost wishing some activist hacker would buy the data for the House and Senate reps and go to town...just to get their attention. Purchase pornhub accounts , sha…
E-CORP
Re: Panerabread.com leaks millions of customer records
#33Earlier quoted context omitted.
That is a terrible idea. Imagine sentencing programmers to jail for security issues in their code.
Why is a software developer an engineer when it fluffs their ego, but not an engineer when regulation and consequences for failures are necessary? Yes, if the security failure is grossly negligent, you should face criminal proceedings. As a C level executive, you are responsible for your chain of command.
By that extension if a McDonald's drive thru employee accidentally spills hot coffee on a customer, the CEO is responsible and should be charged with assault?
Re: Panerabread.com leaks millions of customer records
#34Earlier quoted context omitted.
Don’t forget, “We’re sorry,” “We’ll do better,” and my personal favorite, “Trust us!” I’d prefer crippling fines.
"I’d prefer crippling fines" Probably won't happen until some Senator gets personally burned. Equifax hasn't suffered much, for example, and they released almost all of their info for every adult in the US that ever used a credit card or had a mortgage. I'm almost wishing some activist hacker would buy the data for the House and Senate reps and go to town...just to get their attention. Purchase pornhub accounts , sha…
My guess is that senators that have been burned have been done so secretly and are being blackmailed.
The Equifax dump was apparently huge.
Re: Panerabread.com leaks millions of customer records
#35Earlier quoted context omitted.
Why is a software developer an engineer when it fluffs their ego, but not an engineer when regulation and consequences for failures are necessary? Yes, if the security failure is grossly negligent, you should face criminal proceedings. As a C level executive, you are responsible for your chain of command.
By that extension if a McDonald's drive thru employee accidentally spills hot coffee on a customer, the CEO is responsible and should be charged with assault?
Is that grossly negligent? No. Is keeping the coffee excessively hot for cost reasons, thereby causing the customer to receive third degree burns on their genitals and winning in court? Yes.
https://en.m.wikipedia.org/wiki/Liebeck_v._McDonald%27s_Rest...
Your culture is set by your leadership. Make good choices.
Re: Panerabread.com leaks millions of customer records
#36Years ago, I was assigned to clean up an office building that had recently been vacated by a government cybersecurity contractor. While throwing away all the trash that had been left behind I discovered a binder that had at least a hundred pages of print outs from mapquest with the location of the panera bread on each circled in pen.
Comments like this tend to weirdly circulate, I've noticed, with people forgetting that originally, it was completely anecdotal and unsourced.
Op I don't mean to disparage you, but this is the internet, and there just aren't enough grains of salt in the world to allow me to swallow a tale like that without speaking up.
Re: Panerabread.com leaks millions of customer records
#37Earlier quoted context omitted.
Why is a software developer an engineer when it fluffs their ego, but not an engineer when regulation and consequences for failures are necessary? Yes, if the security failure is grossly negligent, you should face criminal proceedings. As a C level executive, you are responsible for your chain of command.
By that extension if a McDonald's drive thru employee accidentally spills hot coffee on a customer, the CEO is responsible and should be charged with assault?
[deleted]
Re: Panerabread.com leaks millions of customer records
#38Earlier quoted context omitted.
By that extension if a McDonald's drive thru employee accidentally spills hot coffee on a customer, the CEO is responsible and should be charged with assault?
Is that grossly negligent? No. Is keeping the coffee excessively hot for cost reasons, thereby causing the customer to receive third degree burns on their genitals and winning in court? Yes. https://en.m.wikipedia.org/wiki/Liebeck_v._McDonald%27s_Rest... Your culture is set by your leadership. Make good choices.
I'm familiar with the case, that's why I mentioned it. My point was that although they lost the civil suit, there weren't any criminal proceedings against C-levels. I understand the argument of negligence being as guilty as malicious intent but it creates a sweeping blanket that's hardly fair or enforceable.
I agree with your principles in theory but it's just impractical.
Re: Panerabread.com leaks millions of customer records
#39Maybe someone could go in to business and provide services that would help companies prevent these things from happening?
Re: Panerabread.com leaks millions of customer records
#40Earlier quoted context omitted.
Is that grossly negligent? No. Is keeping the coffee excessively hot for cost reasons, thereby causing the customer to receive third degree burns on their genitals and winning in court? Yes. https://en.m.wikipedia.org/wiki/Liebeck_v._McDonald%27s_Rest... Your culture is set by your leadership. Make good choices.
I'm familiar with the case, that's why I mentioned it. My point was that although they lost the civil suit, there weren't any criminal proceedings against C-levels. I understand the argument of negligence being as guilty as malicious intent but it creates a sweeping blanket that's hardly fair or enforceable. I agree with your principles in theory but it's just impractical.
The Department of Justice was able to dismantle Arther Anderson after their fraudulent audits of Enron. Lots of things that are impractical are possible with sufficient effort. And the government has unlimited resources for those efforts.
You must hold systemic negligence and corruption accountable, or it perpetuates the cycle.