3 ms·

How is that the "Oh dear."? Do you work for a bank? That seems like the least interesting bit of information here for individuals. It's really bizarre to me t

How is that the "Oh dear."? Do you work for a bank? That seems like the least interesting bit of information here for individuals. It's really bizarre to me that people here seem to consider their credit card numbers more sensitive than their travel history or even contact information.

raesene9 8y ago
well possibly not. If the attackers got the keys to decrypt payment details that means that victims, in addition to the identity theft risks, may also face fraudulent transactions on those cards as a risk.
- ryanlol 8y ago
  Even if the payment information is in plaintext it'll primarily be the banks who are affected, not the customers. I'd be far more concerned about my privacy than my banks money.
  - raesene9 8y ago
    Anyone hit with fraudulent charges has to a) notice them, b) dispute them and c) go through the annoying process of having your card re-issued. As to privacy, after the number of breaches of personal info. there have been, I'd be inclined to let the idea that this level of personal data is private :)
    - ryanlol 8y ago
      >a) notice them Don't you review your charges regularly? Even without fraud you're bound to be losing money to erroneous charges if you don't. >b) dispute them I've usually just had to submit a quick online form consisting almost entirely of checkboxes, while yeah that's some work it's still not going to take more than a minute of my time. >c) go through the annoying process of having your card re-issued. Seems like this is vastly more annoying with some card issuers than others.
      - raesene9 8y ago
        I notice sure, but that doesn't mean all of the x million people who've just had their cards stolen will. Also not all of the cardholders will be online customers, so they'll have the delights of call center processes to go through. Whilst it's obvious you don't regard loss of your credit card information as a serious inconvenience, I don't think that's necessarily a universal sentiment.
      - LeftTurnSignal 8y ago
        >Don't you review your charges regularly? I work at a bank, and you would be surprised how many people don't know how much they have in the bank until they get the message saying there's no money. so many people do this. As long as they don't get that message, they don't worry about how much is in there.
  - macintux 8y ago
    People who use debit cards like credit cards can be seriously inconvenienced by having their checking account drained.
Jach 8y ago
Why is it bizarre? Most people wouldn't consider their comings-and-goings to be worthy of any privacy protections, though some people have non-criminal reasons to want to protect that privacy. Contact information likewise is generally public information, some people may have non-publicized means of contacting them though that they want to keep private. Generally people's level of care will correlate to what nefarious purposes the data can be used for. There aren't that many such purposes with the data exposed here until you consider the passport number (probably something more secure than a SSN for most Americans?), payment info, or login info. The purposes I can think of for the other data are reliant on the metadata that so-and-so was at that location at that time, when I might have believed something else.

raesene9 8y ago

well possibly not. If the attackers got the keys to decrypt payment details that means that victims, in addition to the identity theft risks, may also face fraudulent transactions on those cards as a risk.

ryanlol 8y ago
Even if the payment information is in plaintext it'll primarily be the banks who are affected, not the customers. I'd be far more concerned about my privacy than my banks money.
- raesene9 8y ago
  Anyone hit with fraudulent charges has to a) notice them, b) dispute them and c) go through the annoying process of having your card re-issued. As to privacy, after the number of breaches of personal info. there have been, I'd be inclined to let the idea that this level of personal data is private :)
  - ryanlol 8y ago
    >a) notice them Don't you review your charges regularly? Even without fraud you're bound to be losing money to erroneous charges if you don't. >b) dispute them I've usually just had to submit a quick online form consisting almost entirely of checkboxes, while yeah that's some work it's still not going to take more than a minute of my time. >c) go through the annoying process of having your card re-issued. Seems like this is vastly more annoying with some card issuers than others.
    - raesene9 8y ago
      I notice sure, but that doesn't mean all of the x million people who've just had their cards stolen will. Also not all of the cardholders will be online customers, so they'll have the delights of call center processes to go through. Whilst it's obvious you don't regard loss of your credit card information as a serious inconvenience, I don't think that's necessarily a universal sentiment.
    - LeftTurnSignal 8y ago
      >Don't you review your charges regularly? I work at a bank, and you would be surprised how many people don't know how much they have in the bank until they get the message saying there's no money. so many people do this. As long as they don't get that message, they don't worry about how much is in there.
- macintux 8y ago
  People who use debit cards like credit cards can be seriously inconvenienced by having their checking account drained.

Jach 8y ago

Why is it bizarre? Most people wouldn't consider their comings-and-goings to be worthy of any privacy protections, though some people have non-criminal reasons to want to protect that privacy. Contact information likewise is generally public information, some people may have non-publicized means of contacting them though that they want to keep private. Generally people's level of care will correlate to what nefarious purposes the data can be used for. There aren't that many such purposes with the data exposed here until you consider the passport number (probably something more secure than a SSN for most Americans?), payment info, or login info. The purposes I can think of for the other data are reliant on the metadata that so-and-so was at that location at that time, when I might have believed something else.