VTech fondleslabs for kids 'still vulnerable' despite sanctions

Fine?

A modest cost of doing business, peanuts.

10% of turnover or $20,000 per affected person would be a fine.

Just a plain of stock statement from them for something that has been reported before.

I'm sure there must be a template for these statements.

They don't want to do anything about the issue because that would cost money. They won't fix it until they are told to be a regulator or they get fined.

Needs some parsing?

"the deal means that VTech is "required to implement a comprehensive data security program, which will be subject to independent audits for 20 years" as well as "misrepresenting its security and privacy practices"."

A deal that requires them to misrepresent their security and privacy practices doesn't sound all that great.

Cost of doing buisness

The same tests on a newly purchased InnoTab reveal that the same hack is still possible and nothing had been done to address the problem, according to Pen Test Partners' Ken Munro.

Nothing will change until the cost of doing nothing out ways the cost of fixing the problem.

Typical of a HK based business.

you only have to speak to the CEO and board members of any company in HK to understand that they consider "IT" at the same level as Janitorial services.

They think paying 16k-20K HK a month is too much for IT staff who only need a secondly ed., and that if you don't buy kit from places like Taobao and brands like TP-Link then you are budgeting poorly.

I kid you not..

Add into that mix that most males who can use a computer in HK seem to think they are some sort of IT geniuses just because they can write an app or stick some cat 6 cables in the back of a router and the stage is set.

Then you have to deal with idiots at the top who get so deeply involved into writing software, that they start dictating things like:

"store the date as text" in the database because we won't need it as a date....

"make the spacing on the HTML page match this exactly"

Then the programmers have to go and patch applications to parse dates out manually using own built libraries, because it turns out 5 months later it might be useful, now the stage is set for all sorts of data injection.

During this continual process of piss poor mind changes they are master-bating about "waterfall diagrams" "SPRINT" , "KPI" and any other buzz terms they have read in their glance through software development....

but not a single code repository in sight, because they did not get to that part of the process or it's not "buzz wordy" enough.

Don't even get me started that many of them consider working on their LIVE systems as normal.

Privacy policy/FTC

VTechs "privacy" policy was the only thing updated, not their "security" policy.

Their privacy policy clearly mentions data collection and that parents must consent.

As far as the FTC is concerned, I have very little faith.

I have made formal complaints to the FTC and the FTC representative told me they do not take action or investigate individual claims.

Their only function is to document the claim(s) and I (assume) they only take action when multiple claims are reported for the same offense.