[XorNot]

No it is better to do absolutely nothing, and quietly divest yourself from them because that's not illegal.

But what we really need are some damn whistleblower protections for cybersecurity - buzz-wordy enough for government funding and command centers, but no actual help for the people who want to help because it feels like the right thing to do.

[gilgoomesh]

There are protections for cybersecurity here. From the article:

> HIPAA explicitly forbids LSU from retaliating against me for reporting a HIPAA violation, so I filed a federal complaint against them for their illegal retaliation.