Live data from Hacker News

PayPal discloses data breach that exposed user info for 6 months

bleepingcomputer.com

91–93 of 93 posts

Re: PayPal discloses data breach that exposed user info for 6 months

#91

Earlier quoted context omitted.

When a bridge falls, there is a case in the courts, and sometimes engineers go to prison. Why shall be different with code?

This is a terrible analogy. You're comparing a failing bridge to an attack. These things are not the same. We did not sue the designers of the World Trade Center because their buildings could not withstand being hit by a plane.

Bridges are expected to stand, for example, a lorry hitting at 120km/h speed a pile. Which is "a plausible attack".

Re: PayPal discloses data breach that exposed user info for 6 months

#92

Earlier quoted context omitted.

When a bridge falls, there is a case in the courts, and sometimes engineers go to prison. Why shall be different with code?

The defense for the civil engineer is that his design was in accordance with usual and customary engineering standards. If he did something unusual or new, he might be liable if that was the root cause of the failure. If he signed off on a sound design, he's probably OK. Should work the same with software. The problem is that nobody learns that, schools don't teach it (school isn't even required to be a software deve…

https://en.wikipedia.org/wiki/Therac-25

https://www.abc.net.au/news/2025-10-22/samsung-mobile-device...

We don't know also most of the software failures that cause death.

Pretending that bugs don't kill people is not the way forward to solve the issue of having bugs in absolutely everything we have to deal with, sometimes by force.

Re: PayPal discloses data breach that exposed user info for 6 months

#93
post #64

Earlier quoted context omitted.

Wero doesn't add any value over standard SEPA transfers, I don't see why does it even exists. PayPal at least has some customer protection scheme.

It's instant and much simpler than logging into your bank. Many EU countries already have their own alternatives like swish and vipps. Can pay with just knowing the phone number, scan qr code, even quite common in stores. No fee at all for private use, small merchants just need an app, no additional hardware.

This is true for the official SEPA Instant Transfer and the standard EPC QR code format, too.

https://en.wikipedia.org/wiki/EPC_QR_code

Post reply on HN