Reply to post:

One part of any proposed rule or legislation should make it HARDER for manufacturers of insecure kit to claim damages from hackers, and EASIER for their customers to claim damages from THEM if they get pwned. Also, include a clause that, should the company go bankrupt, any entityy acquiring their trademarks, IP, assets, good will (if any), etc., are also, knowingly and explicitly, acquiring any liabilities for the insecure products, as well. It would be nice if directors could be held personally liable since, much like "(k)nowing that one is to be hanged in ten days..." knowing that one's own, personal wealth is at risk "... tends to concentrate the mind wonderfully", but that may be a bridge too far.