If a bank robber steals my car and uses it during a holdup, my car may get bullet holes shot in it from "private" security guards. Yet, I have no legal recourse to be compensated from the security guards for the damage to my "stolen vehicle." I must seek compensation from the thief whole stole the car in the first place.

Now, replace thief with hacker, and car with server, bank with database, and security guard with SysAdmin. The picture becomes very clear, and quite obvious.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/134/17760#17760