Hacker News Reader

While I never want to see companies suffer data breaches and breakdowns in security, it's possible that the merging of Sprint and T-Mobile's subscriber base and systems might be the kind of cautionary tale told to management in the future to justify more spending on security budgets, especially around the merging of systems.

View on HN

Nah. As long as costs are negligible and there's no corporate death sentence for repeat offenders (T-Mobile has had 5 breaches in roughly the same number of years), nothing changes. Equifax is still around, right [1]?

[1] https://en.wikipedia.org/wiki/2017_Equifax_data_breach

Problem with security spending is that a lot of it comes down to useless audits which really don't find any holes - they just "enforce" compliance. Yes, PCI compliance is important but how many PCI compliant companies have been breached in the past decade?

Reply on news.ycombinator.com