Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Have I Been Pwned 2.0

troyhunt.com

Post reply on HN
Print view View original

81–90 of 323 posts

Re: Have I Been Pwned 2.0

#81

Post by watercolorblind »

anamexis wrote: post #75
mulmen wrote: post #60

Earlier quoted context omitted.

The idea of fines as a revenue stream has never sat well with me. Fines are meant to be a disincentive. The ideal collection amount is zero. Treating them as a revenue stream creates a perverse incentive to enforce the penalty without disincentivizing the behavior.

I think the problem is: 1. How else would you penalize businesses? 2. What else would you do with fines? If fines exist, it would seem foolish not to budget around that.

Maybe a uniform tax credit/refund for each citizen that is covered by that level of government. We the citizens can then decide if we fix the issue or continue to generate fines, but at least the budget isn't expecting revenue that could disappear (like the lack of traffic tickets during the beginning of COVID).

Re: Have I Been Pwned 2.0

#83

Post by j_w »

anamexis wrote: post #75
mulmen wrote: post #60

Earlier quoted context omitted.

The idea of fines as a revenue stream has never sat well with me. Fines are meant to be a disincentive. The ideal collection amount is zero. Treating them as a revenue stream creates a perverse incentive to enforce the penalty without disincentivizing the behavior.

I think the problem is: 1. How else would you penalize businesses? 2. What else would you do with fines? If fines exist, it would seem foolish not to budget around that.

Governments should not operate fiscally like corporations. A financial institution will budget around fees because it's in their benefit for their customers to incur fees. A government should not budget around fines because they want the behavior which was fined to not occur at all.

Re: Have I Been Pwned 2.0

#84

Post by johnklos »

I really wish Troy would've put a little more thought in to this before deciding to host using a for-profit corporation based in the US that wants to be a monopoly.

Will Cloudflare sell data to US TLA agencies? Probably.

Re: Have I Been Pwned 2.0

#86

Post by koolba »

diggan wrote: post #33
XorNot wrote: post #29

Earlier quoted context omitted.

Application specific credit card numbers really needs to be a legally required thing. My card has been skimmed a couple of times and by far the most annoying part of the experience is having to reset and update regular accounts with the new number. Of course for online purchases the whole flow here should be inverted: businesses should just be registering against my payment provider directly, no account numbers invol…

> Application specific credit card numbers really needs to be a legally required thing. My latest card (debit) one has a feature I've not seen elsewhere, but I think kind of solves that too. It has a new CVC number every 10 minutes, which I kind of both hate and love. Love it for the obvious reasons of "not even having the physical card lets you use it digitally" but also because I cannot have it 100% in my password…

I’ve want a physical one of these that changes both the CVC and the entire 16-digit number. Heck let the name submitted with the number be a longer checksum that can be verified at point of sale to figure out who’s actual account it is.

Plus then my gibberish name on my card number will match the gibberish secret question answers.

Re: Have I Been Pwned 2.0

#87

Post by craigdalton »

anamexis wrote: post #75
mulmen wrote: post #60

Earlier quoted context omitted.

The idea of fines as a revenue stream has never sat well with me. Fines are meant to be a disincentive. The ideal collection amount is zero. Treating them as a revenue stream creates a perverse incentive to enforce the penalty without disincentivizing the behavior.

I think the problem is: 1. How else would you penalize businesses? 2. What else would you do with fines? If fines exist, it would seem foolish not to budget around that.

How about fines go into a sovereign wealth fund (but not be seen as major source for the fund- more a bonus) so there is no short term budget planning based on fine revenue.

Re: Have I Been Pwned 2.0

#88

Post by mcmcmc »

mulmen wrote: post #60
Avicebron wrote: post #38

Earlier quoted context omitted.

Probably impossible, but create a slush fund where companies that behave badly are forced to pay into so we can do things like fix roads and build housing.

The idea of fines as a revenue stream has never sat well with me. Fines are meant to be a disincentive. The ideal collection amount is zero. Treating them as a revenue stream creates a perverse incentive to enforce the penalty without disincentivizing the behavior.

If your ideal is a perfect society where everyone follows the all rules all the time you are going to be sorely disappointed. The ideal collection amount is the size of the fine multiplied by the actual occurrence of the offense. And that revenue should be strictly used for rehabilitative or restorative justice. For example, speeding fines should go to road improvements that deter speeding making roads safer. If no one’s speeding, there’s no need for that. But people will always break the law.

Re: Have I Been Pwned 2.0

#89

Post by glial »

idiotsecant wrote: post #39
Avicebron wrote: post #38

Earlier quoted context omitted.

Probably impossible, but create a slush fund where companies that behave badly are forced to pay into so we can do things like fix roads and build housing.

Wow I think you just launched a political party I would vote for

> companies that behave badly are forced to pay

Isn't this just regulation?

Re: Have I Been Pwned 2.0

#90

Post by _heimdall »

Avicebron wrote: post #38
nyokodo wrote: post #34

Earlier quoted context omitted.

> do direct deposits to many millions of people, every time there's new settlements paid I wish I could easily donate my tiny settlements to a good cause. It might make it worth the time to register for the class.

Probably impossible, but create a slush fund where companies that behave badly are forced to pay into so we can do things like fix roads and build housing.

We could also design some kind of electoral process for picking those in charge of defining the rules and creating yet more bodies to enforce it.

Maybe this time we can come up with a better way to disincentivize corruption and bribery.

Post reply on HN