Re: Trying to hide a breach?

[Valdis.Kletnieks () vt edu]

On Mon, 05 Apr 2010 17:33:17 -0800, "Rob, grandpa of Ryan, Trevor, Devon & Hannah" said:
> b)  Gee, those disclosure laws work really well, don't they?  (Excuse me, I have to 
> go to the orthodontist to get the tongue pulled out of my cheek.)

You want to see both faster, more accurate disclosure *and* better security?

Currently, if there's a breach that results in fraud, the bank issuing the
card ends up eating it.  Now if we changed it so the group that had the
breach is liable for any fraud between when they knew (or reasonably *should*
have known) they had a security issue, and when the cardholders were notified...

Too radical?

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.