Hacker News Reader

I'm fine with fines, but I hope prison time is restricted to intentional and malicious illicit behavior and not anything due to neglect or oversight. I'm not a fan of people being put in cages unless they're violent or have ruined people's lives intentionally.

View on HN

It is. Read Sec 5.(d).

It's not like people will be thrown in prison because their DB wasn't patched quickly enough. They have to knowingly and intentionally lie to the federal government in an annual report.

They have to knowingly and intentionally lie to the federal government in an annual report

So it's a nonstarter, since the people being prosecuted for these things will have lawyers adept at whittling down intent to only the most brazen and malicious behavior. Not only that, but Sarbanes-Oxley showed us how effective "annual report" red lines are.

Perhaps. But that's not a compelling argument against this bill. Perfect enemy of better and all that.

I agree that the nirvana fallacy is implicated, but there were zero convictions under SarbOx, zero prosecutions even.

Reply on news.ycombinator.com