[patates]

> I do sometimes wish that when the negligence is so gross that the government would issue a fine

I also think that there must be a line between getting hacked because some 5th level transitional dependency had a memory overflow bug which made it possible for the attacker to push some sensitive data in the response headers vs "auth? what auth?".

Very hard to exactly define it though, where it should lie, other than the extreme examples.

[_justinfunk]

This is a very good point. It reminds me of when the US FBI was "hacked". Where hacking meant that you could send emails from the client-side.

https://www.theverge.com/2021/11/14/22781341/fbi-email-syste...