no class action
perhaps that's not the appropriate mechanism, or perhaps that remedy isn't
available to a large number of those affected.
but sooner or later folks are going to be held liable for poor engineering
or poor implementation of networking software, just like folks today can be
held liable for poor engineering or implementation of bridges or buildings.
when people who design such programs know about these risks, are aware of
adequate countermeasures (e.g. don't make executable content "clickable",
or execute it only in a sandbox), and yet take no action to ameliorate
the risks... how far is that from negligence?
Keith