So make executives personality liable for data losses.
That is the only way to make change happen. Execs have the final say, they get the final fine.
Or remove the concept of a limited liability company: so that the directors must take responsibility. They're the ones directing the executive anyway.
It wouldn't need any special carve out in law: other than the laws covering the structure of corporations.
If you did that you’d destroy every small business in America in a heartbeat. Nobody would do anything that could have any sort of perceived risk because anything you do could result in you losing literally everything in your life, your house, your car, everything you own.
Just like the rest of the US workforce then. One pay cheque away from homelessness.
The rest of the workforce is not one check away from homelessness. Eviction is one of the absolute most difficult things to do to a person. Even not paying your rent for months won’t result in an immediate eviction. And even with eviction you still own everything else. A lawsuit that can take personal possessions can literally strip you of every possession you own.
Some of us adopt that level of risk regularly. Not everyone gets paralyzed by high risk scenarios
What level of risk do you take that involves losing everything you own?
Maybe if a company can't keep its employee data safe it shouldn't exist.
You’re not saying the company shouldn’t exist, you’re saying the person that started the company should immediately be homeless with no money and no possessions.
Only way to end capitalism nazist
Looking into the mentioned unforgivable vulnerabilities and stubborn weaknesses published by CISA:
Given the above criteria, following are some candidates for unforgivable vulnerabilities that satisfy all (or most) of the criteria for an unforgivable vulnerability. […]
"A" characters in:
<script> tags, especially in the:
' in the:
"id" or other identifier fieldinclude($_GET['dir'] . "/config.inc");"../.." or "/a/b/c" in GET or SEND commands of frequently-used file sharing functionality (e.g., a GET in a web/FTP server, or a send-file command in a chat client)"authenticated=1" cookie/form field"help" (Windows)malloc()/calloc()| CWE-ID | Description | 2023 Rank | |
|
|
| | CWE-787 | Out-of-bounds Write | 1 | | CWE-79 | Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | 2 | | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | 3 | | CWE-416 | Use After Free | 4 | | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 5 | | CWE-20 | Improper Input Validation | 6 | | CWE-125 | Out-of-bounds Read | 7 | | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) | 8 | | CWE-352 | Cross-Site Request Forgery (CSRF) | 9 | | CWE-476 | NULL Pointer Dereference | 12 | | CWE-287 | Improper Authentication | 13 | | CWE-190 | Integer Overflow or Wraparound | 14 | | CWE-502 | Deserialization of Untrusted Data | 15 | | CWE-119 | Improper Restriction of Operations within Bounds of a Memory Buffer | 17 | | CWE-798 | Use of Hard-coded Credentials | 18 |
and capitalism is the exact cause preventing these issues from being remedied
Well that and the associated failure of tech culture in Silicon Valley and elsewhere to understand the important of organizing in the workplace not only to improve the quality of working conditions so you can truly show up and feel supported to do good work you are proud of... but also to ensure that the industry at a basic level remains functional and ethical.
If you look at the primary motivating reasons of a lot of industries striking in the US, it often has to do with a universal anger and grief that basic aspects of their work are being undermined by carelessness, nursing is a good example of that.
Tech workers had a moment of incredible cultural and material power there, and they failed to translate that into a set of truly professional standards and become something like engineering, plumbing or land surveying, something with a license, a set of high standards that are grounded in a philosophy of doing good honest work... like how doctors have.
This invited in the subsequent dehumanization of tech workers in the last 20 years and the rise of AI further rationalizing more dehumanization and devaluing of tech work.
failure of tech culture in Silicon Valley and elsewhere to understand the important of organizing in the workplace not only to improve the quality of working conditions so you can truly show up and feel supported to do good work you are proud of… but also to ensure that the industry at a basic level remains functional and ethical.
which were sabotaged by Silicon Valley bourgeoisie. Silicon Valley never ceased being anti-unions, fired at-will, colluded with other firms so you wouldn't get hired elsewhere. Organizing could never grassroot in blue Texas.
and they failed to translate that into a set of truly professional standards and become something like engineering, plumbing or land surveying, something with a license, a set of high standards that are grounded in a philosophy of doing good honest work… like how doctors have.
I am starting to feel like you're not aware how successful the bourgeoisie have destroyed every single grassroots organization in the , but unlike other blue collared labours, they allowed their Nazi doctors’ standards to remain. Did you earnestly believe doctors in the weren't still running Nazi experiments domestically after WWII?
dehumanization of tech workers in the last 20 years and the rise of AI further rationalizing more dehumanization and devaluing of tech work.
Reframe your narrative, never ceased dehumanization campaigns. Esp. in tech.
I am not saying it was a fair fight, but there absolutely was, however the endpoint was reached, a culture of disinterest about it that was not preordained.
https://www.patternlanguage.com/archive/ieee.html
^ I agree with everything Christopher Alexander says about the computer/software industry here in 1996, that talk hasn't aged a nanosecond
Fear of genocide ≢ disinterest to organize.
It's not the exact thing; it just makes it worse. For many people, it's personality and psychology; they go the path of least resistance and don't care about much besides their main goals. Whether you embed it in capitalism or not, these fundamental causes remain.
Do you have an economic or social system in mind where it would be solved or better?
Do you have an economic or social system in mind where it would be solved or better?
Democratic Socialism
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Enjoy!