I’m sorry Roon, I have great respect for you, but in both of the incident reports in question, even if we take them on face value, which I have a great deal of difficulty doing, the description is one of raging incompetence, with no real IDS logging in place, with terrible sandboxing far worse than normal industry standards, with no one actually paying attention to what is going on, with no compensating controls. I’ve consulted for a large fraction of my life in the financial services industry, and if anything like this had happened there, everyone responsible would’ve been fired for doing something incredibly stupid, and I’m not even talking about the contents of the experiments themselves, which were also stupid.