Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, what will make the difference is being personally liable for the vulnerabilities you introduce.

Not the company. You.



How many individual engineers do you suppose get prosecuted for making errors--even careless ones? I'm guessing very few in the West. And I'm not even sure lopping off a head here and there to encourage the others is even a good idea.


> How many individual engineers do you suppose get prosecuted for making errors--even careless ones?

Not many but is that because they don't get sued or because professionals who face consequences for negligence make fewer stupid decisions?


I would assume that engineers, at least in the US, are far more concerned about getting fired/eased out than prosecuted if they do stupid things given that companies can do so pretty easily.


Would you say the same is true for a lawyer? Are they more worried about being fired from a law firm than being sued for malpractice and being disbarred? If not, why would engineers be different?


I would assume that being disbarred has a pretty high standard of misconduct as opposed to simply not making partner or whatever level of action makes maintaining employment at a large law firm practical.


Look at Sarbanes-Oxley for precedent. Management has to be made liable for sufficient cultural shift to occur.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: