Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

A strong engineering case can be made for "Look, if you installed a Brinks safe for a year, experienced no employee theft, and then had an Evil Hacker come in and swipe $10k from you, you got excellent ROI. Your insurance will inevitably pay the claim. We'll reimburse them. They won't cancel your policy. 998 similarly situated stores lost nothing; the last one had someone crash a pickup truck through the window and winch the safe away. Terrible thing, that, but that's why we're all insured."

You don't buy a safe so that you'll never get robbed. Banks don't have that as a desirable security posture! [+] You buy a safe to cheaply decrease the total cost of theft.

[+] Fun fact: average bank robbery costs the bank only $8k or so in lost cash. This is one of the many reasons why every bank in the country has In The Event Of A Bank Robbery Don't Try To Be A Hero Seriously It's Pocket Lint in their training about it.



If they had made that argument to their customers at the purchase time, together with a realistic estimate of the degree of security being provided, then that would be a valid argument for them to make now.

Also, as this argument depends in part on insurance, the insurance companies are entitled to the same information.

The real point here, however, is not that the safes can be broken, but that they can be broken relatively easily with techniques that have been known for a long time, and which can be defended against. There is no strong case to be made that this is a well-engineered product.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: