lenerdenator
Joined 3 years ago
Joined 3 years ago
Charlie Munger once said, "Show me the incentives, and I'll show you the outcomes." There are very, very, very few actual incentives to operate a real infosec effort at most companies. Think about it: how many companies have you heard of going out-of-business because of breaches? If you're like most Americans, you've probably received at least one letter from some company you did business with telling you that their systems were compromised and your data may or may not have been stolen as a result. They'll usually close out the letter with an offer of free credit monitoring for some finite length of time. Since that's useless and a lawsuit is a pain in the ass with no guarantee of benefit, the vast majority of people simply sigh and toss the letter in the trash.
There's no real way to pin identity theft or other consequences on a given data breach, so it's hard to make any sort of claim that way.
At the end of the day, the company has saved money by not instituting best InfoSec practices and red-teaming their software on a routine basis. There are no civil or criminal penalties for them not doing so.
So they don't.
I suspect some of these sentiments are real, but also suspect there's a not-insignificant amount of astroturfing going on.
It is not a profitable quarter.
The regulations, liability, and stringency of procedure in pharmaceuticals and healthcare in general simply won't gel with the SV mindset of "move fast and break things"/"forgiveness is easier to get than permission". A University of Missouri pathologist working with Jon Carreyrou put a SV biotech darling in literal prison despite a huge valuation. That sort of accountability is the exact thing founders seek to avoid, not court.
Makes sense.
That being said, water isn't like electricity, land, or a given year's tax revenues. It exists in a cycle and can be reused. It can be piped in from a potable water source, and you could probably develop a cooling loop that would return it back to the civic supply in potable form.
Other than somebody not wanting to because "b-b-b-b-but what about the shareholders!?", why not build that loop, put its components into mass production, and let economies of scale start cutting the cost while having less impact upon local water districts?
If it makes the major shareholders money, then in our system, it is, by default, not a failure mode, but a feature.
The C-suite has a contract that guarantees them generational wealth under most circumstances. They're incentivized by stock options granted to them by the board, which is elected by shareholders. Most shareholders in major companies are institutional investors who are paid to do nothing but make sure that a company going out-of-business is a non-issue (if not even a boon) for their returns. It makes no real difference to the institutional investor if Reddit goes down in price; the people who were gaining in their holdings from Reddit are diversified. The people actively drawing off of their holdings are doing so from asset classes less volatile than equities.
In other words, there's no incentive to keep companies running as a going concern.