Embed Notice

@lauren it is pointless. We can continue to prosecute some of these attackers with varying success, but the more pressing and impactful thing is to compel organizations who hold a public trust (banks, hospitals, etc.) to do more than the bare minimum to defend.

These attacks are the wages of low-cost software development, a CYA approach to compliance, and an emphasis on generic bolt-on security products that mostly don't work (instead of better software engineering).