No, I never said I thought it was good business practice. But I&#x27;m saying it&#x27;s not good business practice to ignore it. If you can afford to ignore it, then there&#x27;s no issue, but there&#x27;s plenty of sites that don&#x27;t have protection against this, and have money on the line if they get taken down.<p>The cost of paying off (a semi-probable) attack, might be better than going down the next day, and having to firefight it.<p>I&#x27;m playing the devil&#x27;s advocate here. I would not pay x thousand dollars because of an email from said group, but I can understand it slightly better than sending money for nigerian scams.