Better to let a malicious hacker find them, exploit them and hide their tracks and do unreputable damage to both those attacked and the reputation of the hacked business/school.

That's the message they are sending out to everyone, so next time they get hacked it'll be by someone malicious, and it'll happen. And then when they are in a legal case defending themselves due to their crap security giving away private or confidential data, and they ahave a massive fine, they can proudly say "we wanted this to happen, we are too stupid to allow people to help, we want this and we want people to avoid us in droves and for us to close due to lack of interest."

The dumb always learn the hard way.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10611/33777#33777