←back to thread

293 points giuliomagnifico | 2 comments | | HN request time: 0.44s | source
Show context
shayway ◴[] No.45108426[source]
> Amazon argued that the class was too large to be manageable

Sorry, we've wronged too many people to be held accountable! What a wild argument.

replies(9): >>45108604 #>>45108647 #>>45109746 #>>45110618 #>>45111025 #>>45111655 #>>45111976 #>>45112486 #>>45125926 #
p1necone ◴[] No.45108647[source]
Unfortunately this approach seems to fly all the time for large businesses.

Plucky startup takes the 'ask forgiveness rather than permission' approach and ignores a bunch of regulations, legal system doesn't care because they're just a plucky startup.

10 or so years later plucky startup is a massive corpo, another 5 or so years later the legal system catches up but they're a massive corpo making piles of cash and the worst the legal system can do at that point is penalize them with the equivalent of pocket change compared to the piles of cash they made while ignoring those regulations.

replies(1): >>45108802 #
gruez ◴[] No.45108802[source]
>up but they're a massive corpo making piles of cash and the worst the legal system can do at that point is penalize them with the equivalent of pocket change compared to the piles of cash they made while ignoring those regulations.

Examples? Usually when I see this argument being brought up, it's usually something like "[multinational megacorp] fined $x for breaking Belgian privacy laws", and then people pile in saying how "$x is 1% of [multinational megacorp]'s turnover" and therefore the fine is just "a cost of doing business", but neglecting to account for how much % of their revenue is in Belgium, or how much money they could have plausibly gained from the offenses in question.

replies(5): >>45108927 #>>45108972 #>>45109411 #>>45110794 #>>45112413 #
briffle ◴[] No.45108972[source]
Equifax: In September of 2017, Equifax announced a data breach that exposed the personal information of 147 million people. The company has agreed to a global settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau, and 50 U.S. states and territories. The settlement includes up to $425 million to help people affected by the data breach.

Apparently, your personal information is worth about $2.90.

replies(2): >>45109047 #>>45110590 #
gruez ◴[] No.45109047[source]
>Equifax: In September of 2017, Equifax announced a data breach that exposed the personal information of 147 million people. The company has agreed to a global settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau, and 50 U.S. states and territories. The settlement includes up to $425 million to help people affected by the data breach.

How much money did they make from the breach though? The argument made by the gp was that the fines were "pocket change compared to the piles of cash they made while ignoring those regulations.". According to FTC's press release, they were fined at least $575M for "failure to take reasonable steps to secure its network". How much do you think did you think equifax saved by skimping on security? Probably not $575M. They got pwned by an outdated third party library. There's no way keeping your libraries up to date is going to cost anywhere near that amount.

replies(2): >>45110092 #>>45110473 #
1. nzeid ◴[] No.45110473[source]
> How much do you think did you think equifax saved by skimping on security? Probably not $575M. They got pwned by an outdated third party library. There's no way keeping your libraries up to date is going to cost anywhere near that amount.

I took their post to mean that the $2.90 figure included damages.

In your words, how much will the ensuing fraud, identity theft, and spam cost me?

replies(1): >>45110598 #
2. gruez ◴[] No.45110598[source]
Yes, but you're moving the goalposts. The original argument was essentially that crime pays, because you'll only get fined a fraction of what you saved/made.