After a breach affecting thousands of institutions, Canvas's decision to reach an agreement with attackers highlights how ransom negotiations risk turning cybercrime into a predictable business model.
Important to define risk because a lot of software people here(me included) will immediately think “what do you mean their data was hacked”. However from a legal standpoint they get to point the finger at Canvas.
My university used to only self host. Now they’re ditching self-hosting for cloud-based SaaS. 🤷♂️
It’s because doi g things on site requires CapEx, which then increases your tax liability.
By going SaaS, you offload the entirety of risk.
The problem is the morons who sign these contracts are fucking clueless about ensuring the liability is strong.
Important to define risk because a lot of software people here(me included) will immediately think “what do you mean their data was hacked”. However from a legal standpoint they get to point the finger at Canvas.