Hacker News Reader

By the same logic, shouldn’t it be illegal to hand over your wallet if you get mugged?

Companies aren’t really paying this money by choice, they are paying it because losing systems/data can in some cases result in an inability to operate - otherwise it wouldn’t really be a ransom.

View on HN

The difference is that if you get mugged, your physical safety is being threated. So giving your money to the mugger is reasonably considered defense against bodily harm. I believe that in most randomware cases, nobody's physical safety is in immediate danger (except cases that involve hospital systems or other remote-controlled/networked medical device).

I'd say there should be an exception for ransomeware cases where physical safety is being threatened.

> I'd say there should be an exception for ransomeware cases where physical safety is being threatened.

doesn't that incentivise attacks on critical services/systems?

I don't think so, because critical services/systems are targetted by ransomware operators regardless of the exception. And I don't think the victim should be burdened to decide between losing a life vs paying hefty fines.

Reply on news.ycombinator.com