Criminal negligence is a high bar. We don't want to send people to jail for mistakes, accidents and miscalculations.
Civil liability is a lower bar. Regular negligence is essentially not using reasonable care. Whether air-gaping a cars computer is reasonable car would be up for debate. But I think you'd have a good case.
Product liability is similar to negligence. It holds the builder, designers, sellers, etc. liable for design defects. But I'm not familiar with caselaw about how hacking vulnerabilities intersect with design flaws.
>If history has shown us anything, it's that we cannot rely on software to separate two systems sharing a network. Only physics can do that.
Yet, a shocking number of critical systems are exposed to the internet.
Civil liability is a lower bar. Regular negligence is essentially not using reasonable care. Whether air-gaping a cars computer is reasonable car would be up for debate. But I think you'd have a good case.
Product liability is similar to negligence. It holds the builder, designers, sellers, etc. liable for design defects. But I'm not familiar with caselaw about how hacking vulnerabilities intersect with design flaws.
>If history has shown us anything, it's that we cannot rely on software to separate two systems sharing a network. Only physics can do that.
Yet, a shocking number of critical systems are exposed to the internet.