Of course it's because security is not mandated. In the past, and in the present, there are many companies who are willing to kill people for the sake of profits, if they can get away with it legally.
IMHO, any commercial violations of human rights, like privacy, should have criminal penalties.
Why do these companies seem to always get away with violating their customers privacy? Why don't they have to pay huge fines for that, or even better, go to jail (those who made such decisions)? Seriously, what they do is criminal.
Because the right to privacy is a human right and the corporation did not respect it. Yes, there are reasons which can limit the right to privacy but protecting corporate profit is not one of them.
You're completely right. Every company has a basic, fundamental obligation to respect the human rights of their customers and partners to security and privacy. This is best manifested as taking reasonable measures to ensure that this basic human right is protected.
Now, there may be a wrinkle. When discussing nation-state grade actors, there's a very real possibility that they may attack in ways that cannot reasonably have been protected against by most private-sector security programs.
What are we to think, to do, to expect in such a scenario? To what extent should be expect any company, even a large and wealthy one, to successfully fend off the full might of a large and powerful nation-state's offensive information security apparatus?
Again, you're absolutely and unquestionably right. Companies can, should, and must take reasonable measures to protect the basic human rights of security and privacy. There just might be some room for subtlety when considering what reasonable measures can accomplish.
Yeah, I agree 100%. But in a lot of the cases mentioned in this thread the private data of the company's customers was at risk. For example system in the original article allowed you to access other people's name, address and national ID number. I was thinking only of situations like these, there's no reason to threaten a company if they're the only ones at risk.
Given that the regulations don’t require that, it’s mostly that companies that choose to do it are making the internet worse because they believe they have the right to harvest personal information.
I've used and greatly appreciate their security related standards. For privacy, there needs to be a lot more legislation upon which standards can be built. Security is in the interest of companies but customer privacy most of the time is not, they need legal mandates with real repurcussions.
Even without the privacy issues it is insane that you are forced to do business with certain corporations in order to fully participate in society. But most people don't care or open alternatives would be more popular.
Why are people obsessed with companies rights? Do they not have enough already?
There's an asymmetry between what a company can do politically/legally given it's resources and what an individual can do. This is why countries generally have some kind of laws protecting consumers.
Security cameras recording footage and it not being used in 99.999% of the time when no crime occurs is fine. The tapes aren't kept forever. Just as having server logs to identify malicious actors i.e. hackers or scammers is fine. What's not fine is e.g. running facial recognition on the security camera footage, or figuring out who bought what (cough Amazon Go).
I haven't seen more than one or two multinational corporations murdering and extracting vital fluids from their customers. Monetizing personal information, however, seems pretty reasonable to expect based on past history.
So have private corporations. The point is that government at least has a mandate to protect it's citizens. Corporations explicitly do not care... and in fact there are many situations where they would be taking on significant liability if they put user privacy above profit (putting any above profit risks a shareholder suit or shareholder activism to bump executives/board)
How are you capable of saying that privacy rights are well protected with a straight face. There are breaches every week in US companies and no on goes to jail, and no company fixes their shit because there's no reason for them to.
The only way I could see someone believeing that it's well protected is due to making money off of violating that privacy
This doesn't make sense to me. What's a corporation going to do? Try to sell you something? So what? Oh no! Facebook is showing me overly-targeted advertisements!
The government can put you in jail or shoot you. That's who we need to be worried about.
The gov't loves it that all of the (mainstream) privacy concern is about corporations, while honestly that's such a small issue in the grand scheme.
Companies don't kill me. It's the government I'm worried about, and the governments of the world have literally no intentions on respecting your privacy.
IMHO, any commercial violations of human rights, like privacy, should have criminal penalties.
reply