Punishing Security Breaches
Schneier has a story on his blog this morning about
punishing security breaches. This one is in response to the tale of Gray Powell, the Apple engineer who left an important bit of technology in a bar recently. You might have heard of it. You also might have been on either the breacher or the corporate side. I'd hate to be in either position myself.
California law prohibits the sale of stolen goods and states that a person who uses someone else’s lost property without permission may be guilty of theft.
And since it's over $950, it's a felony. Even if they didn't know it was stolen, they could face a lesser charge of "misappropriation of lost property" which is a crime but not theft. Charges haven't been pressed yet but the police say they're investigating the options.
My work here is dung.
No I have not! What is this "Apple" you speak of?
Please stop these stupid articles about someone fucking up or planting a phone.
Stop it.
Stop advertising for them.
There's only one way to take care of someone who leaks mission critical information.
First you fire them. No sense in keeping them around if they are going to fuck up like that.
Next you sue them for major damages. Make an example out of them.
Since a corporation has no way to punish someone with actual jail time, the next best thing is to make sure people think twice before making big mistakes again.
Then you wonder where all the job applicants went.
Out of modpoints but really liked a post? 1BDkF6TtmmeZ3yqXbz9yhdYVqRYnwFoXDj
But the multitouch screen understands pinching! That would be a waste!