Legislation cares a lot about information #security these days. When do we laws that keep companies from tainting security's public reputation by demonstrably abusing it for their own commercial interest against the interests of consumers?
Just one example: Bank uses proprietary hardware over #WebAuthn to avoid person-in-the-browser attacks. Workflow for the proprietary hardware allows that very attack. Bank doesn't care to fix it for a year.





