Xfinity waited 13 days to patch critical Citrix Bleed 0-day. Now it’s paying the price::Data for almost 36 million customers now in the hands of unknown hackers.

  • virku@lemmy.world
    link
    fedilink
    English
    arrow-up
    33
    arrow-down
    1
    ·
    11 months ago

    In Europe this would be a hard to explain breach of GDPR. Which could result in some hefty fines. Especially if it is a vulnerability they knew about but chose to wait.

      • kurushimi@lemmyonline.com
        link
        fedilink
        English
        arrow-up
        14
        ·
        edit-2
        11 months ago

        Sure, but given that the poster said “would” the point is to bring additional awareness to how consumer-backing laws with actual teeth can bring about positive change, and perhaps to motivate citizens to support similar legislation and legislators who would write it.

    • plz1@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      3
      ·
      11 months ago

      In the real world, fines are a cost carried to the customer. So even with GDPR, the customer is still the loser in the situation.

        • plz1@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          11 months ago

          So fines come with a requirement that a company can’t raise prices to recoup them?

          • wahming@monyet.cc
            link
            fedilink
            English
            arrow-up
            2
            ·
            11 months ago

            Do you think companies aren’t already pricing their products at the maximum they think the market can bear?

              • wahming@monyet.cc
                link
                fedilink
                English
                arrow-up
                2
                ·
                11 months ago

                Products are already priced at the point that will make them the most profits. That point doesn’t magically change when fines happen.

              • drdiddlybadger@pawb.social
                link
                fedilink
                English
                arrow-up
                2
                ·
                11 months ago

                This thinking was brought up to convince people not to hold companies accountable.

                Make it cost. And if the company refuses to correct the behavior they shouldn’t be allowed to operate. If there is no cost for bad behavior then said behavior becomes how you do business.

                • plz1@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  11 months ago

                  I’m not an opponent of fines, I just think they have no deterrence other than getting caught. Negligence at this level of public harm needs to carry jail time for the executives responsible for it.