NewsCast for Tuesday August 30th, 2016

Clinic Won’t pay breach protection for victims

http://www.zdnet.com/article/clinic-wont-pay-breach-protection-for-victims-ceo-says-it-would-be-death-of-company/
Are companies required to pay for credit protection? It is common, but is it required?
Can a class action suit succeed to force it?
- Will that matter if they just declare bankruptcy?
- If not.. What is the purpose to filing the suit?

California Bill would add security standards to data breach law

https://bol.bna.com/california-bill-would-add-security-standards-to-data-breach-law/
But what is reasonable… it can’t just be what a reasonable company would implement.
Bill Text - https://legiscan.com/CA/text/AB83/2015
Is this going too far? Is it too broad? Is it enforceable?

St. Jude stock shorted on heart device hacking fears

http://www.reuters.com/article/us-stjude-cyber-idUSKCN1101YV
We were trying to build a relationship between testers and organizations.. This is a step backwards for building that trust.

A Temperature-check on the state of application security

>>> If you're reading this, consider clicking the link above to support the show!
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
YouTube home: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
LinkedIn Page: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
X/Twitter: https://twitter.com/dtsr_podcast

DtSR Episode 209 - NewsCast for August 29th 2016

Down the Security Rabbithole Podcast (DtSR)