[bgilroy26]

It is relatively simple to take the argument about responsibility to Nuremburg at the level of fidelity an internet argument requires.

Lets say that after Nuremburg, we are not willing to completely absolve low-level players because we realize after the Holocaust that widespread complicity is the only way such an atrocity can happen.

All the same, we aren't assigning the same level of responsibility to the prison guard that we do to Goebbels, etc. We will apply it proportionately.

If you take the Sony crimes and relate them to the Holocaust -- for nihilistic internet argument purposes -- you end up with some small fraction.

Following the Nuremberg methodology, you take that small fraction and apply it 100% to decisionmakers and proportionately to low-level players. The resulting blame is small enough relative to their breach of privacy that the cyber attackers are in the wrong.

Therefore, taking this argument back to Nuremberg does not serve the purpose of justifying the middle managers/analysts breaches of privacy.