Comments on Information Security Short Takes: Database Admin Hacking his Ex Firm - Is It All His...

Honestly, yes. The victim would be right in stati...

2009-11-23T21:03:06.684+01:00

Honestly, yes. The victim would be right in stating that the attacker cost them that much money.

Would they get it? Probably not. But GEXA (from what I gathered) wasn't going after Kim for the money, they just stated how much it cost them.

This was an attack as a result of internal knowledge (which is one aspect where I have to admit my analogy failed) and had to have

The attacker is by all means guilty of the attack....

2009-11-23T17:18:29.440+01:00

The attacker is by all means guilty of the attack. I am stating that only that the costs of better security should not be dumped onto the attacker - it is the problem of the victim.
But let's stick with the same analogy: Does the victim ask for reimbursement from the mugger because from now on he/she has to use a taxi or take a longer but way which is better lit and with more police

While I don't disagree that the lack of proces...

2009-11-23T15:16:34.038+01:00

While I don't disagree that the lack of process and protection was in place.. This is like asking the victim of a mugging to take responsbility for their own actions.

Yes, maybe the person needed to more aware of their surroundings, but please -- let's not get in the habit of pointing fingers at the victim.