If I make malware that attacks government services I get ASIO’d and can’t even let my family or a lawyer know I’ve been held and interrogated.
If clammy sammy does it the government buys the product and makes piracy for rich failsons legal.
Someone make this make sense.
No concern about the shitty security of Medicare?
internet security is bad yes, but having bad security doesn’t mitigate the crime of trying to break in.
If we accept that line of reasoning we get to a very weird place where we start putting the onus on victims to protect themselves not perpetrators to regulate their antisocial behaviours.
The onus is on whoever holds the data to prevent unauthorised access to it.
They have a duty to yes, but how well or poorly they do that has absolutely nothing to do with whether the hack is criminal.
Openai should be prosecuted for making and using malware.
No1 isn’t suggesting whether it’s criminal or not. I am concerned about Medicare’s security as well as the criminal behavior of OpenAI. There’s multiple lines of inquiry here, including;
How did OpenAI do this? What are we charging them with? How big will the penalty be to deter this in the future? (Ha ha. I can dream.)
How did Medicare/ASD not know about this until they received an email from the attacker 3 months later? What policies/procedures need to change? What can we do to shrink the attack surface and increase detection?
The answer to half of one is the government won’t do anything, will beg to be a customer, and will continue bending over backwards for them.
2 is a fine convo to have but the focus has to be on openai being a malicious actor or the response will be buy their product to pretend to improve things