My expectation is that the insurers -- who have money at risk, but also lots of legal resources -- will sue a negligent software vendor or two. But I fear they'll also sue the attacker's ISP, on the "sue everyone in range" theory. The former is probably justifiable; the latter is not.
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 12:57:34 PDT