4 ms·
Maybe dating/relationship sites should be required to disclose numbers to prevent fraud.
by RexRollman 11y ago
Maybe dating/relationship sites should be required to disclose numbers to prevent fraud.
- TallGuyShort 11y agoThat gets tough without giving a third-party direct access to everything for auditing. You can lie about numbers just as easily as you can imply they're not an issue.
- uptown 11y ago"That gets tough without giving a third-party direct access to everything for auditing." That's kind of the entire idea behind an auditor.
- Crito 11y agoGiving auditors complete access to people's personal profiles? That doesn't phase you at all?
- reagency 11y agoThere ar e ways to audit... Timestamps of account creations, IP block where signups and messages come from....
- halviti 11y agoAnyone competent who wanted to boost their numbers could just pay someone under the table to buy a bunch of vps's or vpn connections and fake all of this. You're just creating hoops, but you're not stopping anyone.
- harryh 11y agoThe way auditors have complete access to people's financial records?
- TallGuyShort 11y agoPeople don't want authorities having access to data on their sexual promiscuity the same way the government keeps tax records.
- fweespeech 11y agoGiven those personal profiles are effectively public to "millions" of users....eh?
- uptown 11y agoDo you seriously think there were controls in-place to prevent Ashley Madison developers from doing just-that? Auditors work with privileged information in order to provide assurances to third-parties that the audited entity is operating in a legitimate way. Sometimes they receive a sampling of data to spot-check things, while other times their review necessitates more-broad access. Both of these approaches necessitate some level of access to what would otherwise be considered confidential information, but audits are performed with the understanding that the firm conducting the audit has as-much to lose by compromising the data privacy of a client as the client. It makes no sense for a reputable auditor to expose the information they're analyzing because it would destroy their firm's reputation, and put them out of business.
- Crito 11y ago> Do you seriously think there were controls in-place to prevent Ashley Madison developers from doing just-that? No, but there should have been. Access to personal customer data should be strictly controlled, with access being granted only to those who need it for their work, and only for as long as they need it. I would never expect them to do that, but they should do that.
- TallGuyShort 11y agoYeah the whole discussion around the privacy implications of this hack is that people DO NOT WANT THAT.