Hacker News Reader

Comment by throwawayboise | Hacker News Reader

> the guy who manages license acquisition is on leave today

At that point, if you really have no other options, you pull the network plug. Or firewall it to internal-only. Email can wait for a day. And the nice thing about the protocol is that it will all get re-sent automatically.

View on HN

Try telling the whole company email can wait a day. Good luck!

this! i cannot fathom any executive choosing the shutdown of email sevices over some risk that something might happen.

Haven't there been incarcerations due to gross negligence like that?

No? Name one.

(Managers are very rarely jailed for anything except the most deliberate fraud; even negligence that gets people killed is routinely not punished at all)

I don't know any which is why I am asking. It seems like there should be well-known victims of being made an example of.

Why? We don't usually hold victims accountable for crime, and hardly anyone understands computer crime anyway.

There have been a couple of big GDPR fines for customer data breach, but obviously those are made against the company and not individuals.

Was Aaron Swartz the victim or the perpetrator? They set out to make an example out of him. They psychologically tortured him until his heart broke and he killed himself. They were extremely effective in terrorizing us into submission and now no one dares confront our masters again, lest you end up like poor Aaron. No one even speaks his name and we all know his story. And this was only an academic institution so imagine what these completely inhuman actors behind tax heavens and so on do to suppress those they prey upon.

It's a punishment system, not a justice system.

How is this relevant?

It replies to this: "Why? We don't usually hold victims accountable for crime, and hardly anyone understands computer crime anyway."

Is there a specific thing you want me to clarify?

Aaron was accused of a variety of charges, because he'd committed the “crime” of intending to violate corporate copyright on other people's academic papers – but the law was blatantly immoral and the prosecution even more so.

He was not a victim of cybercrime; he was the “perpetrator” of something that was retroactively classed as cybercrime. I know you're upset, and angry – we all are – but that just isn't relevant to this discussion.

I said: "It seems like there should be well-known victims of being made an example of."

"Victim of being made an example of."

I never said he was the victim of a cybercrime. And it IS relevant because because it makes it unavoidably clear what I wrote that someone didn't read with proper care: The financial sector doesn't have this experience. - They don't have their own Aaron Swartz.

Ah. I thought that was a case of “I a word”, where the missed word was cybercrime.

Negligence results in civil trials, not criminal penalties (unless you manage email for the DoD or other government entities).

Huh, you mean literally all email will be exfiltrated to some chinese actor? I’m fairly confident most will find that unacceptable.

you and i might. but for most businesses the prospect of loosing money/contracts because an email was read by noone is probably much more real than loosing because too many people read it.

This depends on the sender's mailserver to cache the mail for a day (or a full weekend) without rejecting it. Some mailservers will kickback mail much sooner.

Such servers are then not compliant with the standard of 4-5 days. See RFC 5321 sec 4.5.4.1.

Are non-standard retry intervals actually that common?

But exchange is much more than e-mail, is it not?

Calendar and contacts

Shouldn’t you have, or should I say don’t most orgs have, a spam filter or some other GW in front of Exchange that actually accepts the mail publicly? And then that gateway will send internally to the actual Exchange? This is what I’ve seen in a few orgs.

I don't think email proxies are built to cache entire org ail messages that long.

They don't follow the rfc if they don't. Email protocol is resilient to servers not being teachable for a few days. Humans forgot that though and came to think that email is like slack

Okay, I see what you and parent say, and I might be misunderstanding the setup of common email proxies.

Reply on news.ycombinator.com