<story><title>Up to 1,500 businesses affected by ransomware attack, Kaseya CEO says</title><url>https://www.reuters.com/technology/hackers-demand-70-million-liberate-data-held-by-companies-hit-mass-cyberattack-2021-07-05/</url></story><parent_chain><item><author>dahfizz</author><text>Its interesting to me that the discussion around ransomware attacks on HN is full of victim blaming.&lt;p&gt;When stores are forced to close in SF because of rampant theft, nobody suggests that Walgreens or Target should hire armed guards.&lt;p&gt;If a mall were to be bombed, nobody would suggest that malls should just be built to resist bombing attacks.&lt;p&gt;The entire point of a government is to provide security and protect the rights of citizens. It is the government&amp;#x27;s job to solve &amp;#x2F; prevent &amp;#x2F; deter crime. If we are willing to put the burden of security on the individual, then why would we organize into states at all?&lt;p&gt;I think there could be &amp;quot;IT security codes&amp;quot; just as there are &amp;quot;building codes&amp;quot; to enforce security good practices. But &amp;quot;survive impact from a 747&amp;quot; is not part of our building codes, and similarly &amp;quot;be resilient to targeted, state sponsored cyberwarfare&amp;quot; should not the responsibility of the individual.</text></item></parent_chain><comment><author>nitrogen</author><text>If a bridge collapses, we don&amp;#x27;t get upset that the police weren&amp;#x27;t forming ranks by the bridge to keep the water away.  Software is more like bridges than stores.  It&amp;#x27;s supporting infrastructure that needs to be able to withstand reasonably anticipated forces of nature.&lt;p&gt;We expect buildings to be able to resist termite damage by taking reasonable means to block them.  We should also expect software to resist self-propagating worms and other attacks.  If you build a building in a tough neighborhood (or a warzone), that building has to have security and stability features that match the demands placed on it by its environment.  The Internet is basically a termite-infested warzone.&lt;p&gt;We know that threats exist, we have things like OWASP and other sources of improving best practices to prevent common entrypoints for attacks.  We have to expect software and networks to do better, just as we expect governments to find and stop the attackers.</text></comment>
<story><title>Up to 1,500 businesses affected by ransomware attack, Kaseya CEO says</title><url>https://www.reuters.com/technology/hackers-demand-70-million-liberate-data-held-by-companies-hit-mass-cyberattack-2021-07-05/</url></story><parent_chain><item><author>dahfizz</author><text>Its interesting to me that the discussion around ransomware attacks on HN is full of victim blaming.&lt;p&gt;When stores are forced to close in SF because of rampant theft, nobody suggests that Walgreens or Target should hire armed guards.&lt;p&gt;If a mall were to be bombed, nobody would suggest that malls should just be built to resist bombing attacks.&lt;p&gt;The entire point of a government is to provide security and protect the rights of citizens. It is the government&amp;#x27;s job to solve &amp;#x2F; prevent &amp;#x2F; deter crime. If we are willing to put the burden of security on the individual, then why would we organize into states at all?&lt;p&gt;I think there could be &amp;quot;IT security codes&amp;quot; just as there are &amp;quot;building codes&amp;quot; to enforce security good practices. But &amp;quot;survive impact from a 747&amp;quot; is not part of our building codes, and similarly &amp;quot;be resilient to targeted, state sponsored cyberwarfare&amp;quot; should not the responsibility of the individual.</text></item></parent_chain><comment><author>theandrewbailey</author><text>&amp;gt; Its interesting to me that the discussion around ransomware attacks on HN is full of victim blaming.&lt;p&gt;This is HN. It&amp;#x27;s filled with people whose job is building secure systems, or at the very least are aware of best practices to prevent these attacks. Of course you&amp;#x27;re going to read that they should have done this or that.&lt;p&gt;&amp;gt; When stores are forced to close in SF because of rampant theft, nobody suggests that Walgreens or Target should hire armed guards. If a mall were to be bombed, nobody would suggest that malls should just be built to resist bombing attacks.&lt;p&gt;Have you tried asking that in different places?</text></comment>