‹ BackHN Continuity

Thread

Korea raises data breach fines to 10% of revenue

339 points · 115 comments · throw7

  1. augment_me · · focus · HN ↗
    You can just do what my university did, hire a small shell firm with 3 employees to hold all your data, and when it got hacked they just went bankrupt and we switched to a new shell firm with similar form and function.

    Minimizes money usage and does not require any security investments

    1. louthy · · focus · HN ↗
      Or … and hear me out on this one … care?
      1. augment_me · · focus · HN ↗
        Sounds like something that costs money, if a university doesn't care I don't think most companies will.
        1. louthy · · focus · HN ↗
          Yes, being competent requires effort.

          It certainly feels much better being an proactive member of society rather than a self-serving arsehole though.

          So, there is that.

          1. nostrademons · · focus · HN ↗
            It feels better only as long as everybody else cares too. Being the only one competent in a room of imbeciles is a terrible feeling.

            Hmm, this is perhaps why we get socially-negative businesses that often have very friendly (and driven, and hard-working, and intelligent) internal cultures. Competency becomes a fault line. When it becomes obvious that a large fraction of humanity just doesn't give a shit, a small group of people who are competent and driven turn their efforts to taking advantage of people who don't give a shit. Thus creating industries like market-makers, cryptocurrency, advertising, and AI.

            1. louthy · · focus · HN ↗
              > It feels better only as long as everybody else cares too.

              Not sure who “everybody else” is in your statement, but as someone who founded a healthcare tech platform (since sold) [1], I spent 20 years caring about the many millions of patient medical records we held and making sure my team cared too. In my mind it wasn’t optional.

              I did it because:

              * it’s the right thing to do

              * for professional pride

              * and so I could sleep at night

              And, at least at the beginning, I believed a data breach could be the death knell of the company. Over time the laissez faire attitude to data protection, by the industry as a whole, made it seem like a breach would be survivable, but luckily we never tested that theory.

              I still walked away from it a wealthy man. Being competent and caring about your customers (and being able to sleep at night) doesn’t have to mean failure like it seems everyone here thinks.

              [1] <a href="https:&#x2F;&#x2F;www.meddbase.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.meddbase.com&#x2F;

              1. rpdillon · · focus · HN ↗
                People don&#x27;t think caring about your customers leads to failure, but it&#x27;s a lot harder than not caring, and it does seem to be the case that it is mandatory to not care if you&#x27;re going to be chasing massive valuations.

                We&#x27;re moving from a high trust society to a low trust society, I fear. It&#x27;s a tough transition.

                1. louthy · · focus · HN ↗
                  I realise I’m a sample size of 1, but for me caring was good for business: caring means you can empathise, if you can empathise you can understand, if you can understand you can build a better product.
                  1. rpdillon · · focus · HN ↗
                    We&#x27;re having two different conversations. You&#x27;re advocating for good citizenship, which is great. I try to do that, too. But I also know that&#x27;s not scaleable, and folks are lazy.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.