5 ms·
800Gb of possible Census Bureau data (tax records,etc) leaked. Check your data
- fyrefoxboy12 7y agoisn't the census about to start this year? this is some "same shit, different toilet" scenario. all these so-called secure government institutions or private companies or wherever this database came from. always promising a lot, and delivering little. that's what happens when non-cybersec people are in charge of cybersec things
- teslademigod1 7y agoI think it's safe to assume that every single thing we've ever done online is either now in some unauthorized person's hands, or will be soon. they have a thing like haveibeenpwned there. i checked, but mine wasn't included. this time
- better0uts1d3 7y agoYou make it seem like people should give up. Gotta fight somehow. Even by just deleting personal data, getting off Facebook and social media entirely. Google is tougher to get rid of though
- teslademigod1 7y agoRealistic, not giving up. You can't escape them. even if you do, your friends are on instagram, facebook. what are you gonna do? social distance yourself in a camp in the woods forever? you can mitigate, not avoid. but how do you avoid government data collection and (possible) data leaks like this?
- zentiggr 7y agoNo one can. The radical solution is to understand that everything is out there, data brokers have collected and will sell everything you do. We need to start demanding transparency. That's it. The whole solution. No business should be permitted to have data secured. Period. Hold whatever's needed for immediate transaction purposes, everything else gets WIPED. Credit bureaus have already exposed us all. Open their databases, no more secured storage allowed. They can dump their data or accept responsibility 100% for every field they hold onto. Every other company can follow suit. Every government can follow suit. No more black ops, CIA, FSB, any intel security. No more separate government databases for each department or program, just one open cluster of everybody's info. Screw corporate trade secrets and copyright and every other protection. Open every database and every server everywhere. It'll take maybe a generation or two to adjust to the new reality, but when everybody has to have all their actions out in public, maybe everyone will start to realize that the world really is a different place. Maybe enforcing radical honesty on everyone will help eliminate all the class distinctions, judgments, tribal bullshit when the 1%'s actions are as wide open visible as everybody elses. Maybe data brokers wither and die when nothing is monetizable anymore. Maybe the constant stream of corporate malfeasance goes away when all the records are there for everyone to see, all the time. Maybe we actually start to recognize and treat the mental health issues that result in stalkers, abuse cases, stealing from the elderly, pedophilia, drug addiction, when all the dark web and every other facilitator is in the open. Maybe a couple of decades down the line we'll have people who understand that their actions have consequences and every choice affects those around them and when lying is near impossible the whole damn planet will be more sane for it all. Or I'm a nutcase, or too early for my time. Who can tell?
- salawat 7y agoThe real radical solution is to enforce ownership of any and all metadata connected to you, and to acknowledge that in the case of a breach, damage is done statutorally, even if nothing has happened due to the fact that no one has seen interest in using your info against you yet. You should also have the right to update or modify any state stored about you at any time; after all it is yours. No one who collects it wants that though.
- jrobn 7y agoGoogle is easy to get rid of. It requires willpower. 1. Don’t use or get off gmail (fastmail is good but not free). 2. Limit your use of google search. If you need to try to mask your identity as best you can. 3. Don’t buy google hardware. Because you and your data are the product for google. The hardware is a Trojan horse.
- teslademigod1 7y agoApple is better? it's either Android or Apple then, isn't it?
- zentiggr 7y agoAndroid is Google.
- fyrefoxboy12 7y agoi guess he means -- either use an Android (google) phone, or use an Apple iOS phone. but is apple better than google in this sense (data collection)?
- teslademigod1 7y agoyes, my point is. i don't know if using apple products and getting into that ecosystem is much better than google's ecosystem
- unixhero 7y agoOf course, Apple is not better. It is equally bad. https://www.theguardian.com/world/2013/jun/06/us-tech-giants-nsa-data https://www.theguardian.com/world/2013/jun/06/us-tech-giants...
- peterlk 7y agoI don't think they're saying that at all. My take was that we should treat the internet as a public space even if a web pace claims that it's private. Getting off of Facebook directly contributes to their premise that everything online will be public. If you don't want it to be public, don't put it on the internet. My take: Unfortunately, there are some places where we pretty much don't have a choice - banks, insurance, some government, etc. And the solution to this is to incentivize these institutions to lock things down better.
- better0uts1d3 7y agoI get what you're saying. Makes it seem like people are less responsible than they actually are, i.e. Like putting all their business out on social media for everyone to see
- jrockway 7y agoWe have been doing the census for hundreds of years and it seems to go pretty okay. If someone wants to map your name to your home address, they already have the voter registration database for that.
- danmg 7y agoIt's all the data that's not census data and the fact that it's joined with census data. Why is this data joined with tax information, calls to fire departments, and bike share information?
- jrockway 7y agoBecause people use their real name as the primary key in almost every database? The census team did not steal Lyft's database and leak it.
- danmg 7y agoYes it's their fault for using their own name. It's not the fault of the people keeping creepy dossiers on random customers that creates this hazard.
- ghouse 7y agoWhile there could be census data, this is weak substantiation and feels more like click-bait: > It seems that much of the data on the main folder might have originated from the United States Census Bureau. Certain codes used in the database were either specific to the Bureau or used in the Bureau’s classifications.
- factchecker01 7y agoCyber news has done many of these stories.
- pedrocr 7y agoIt's 800GB, not Gb. Original title has been replaced completely and used wrong units. Original is "Report: unidentified database exposes 200 million Americans" which is far more useful.
- Fiveplus 7y agoWhy do people unnecessarily change titles like this?
- deleted 7y ago[deleted]
- nullc 7y agoIt's annoying to see these leak check things that don't actually show you what specifically was leaked about you. There are big differences in risk factors and reactions depending on what specific data was available.
- maxerickson 7y agoProblem there is that making it easy for you to see info about you makes it a lot easier for me to see the info about you.
- deleted 7y ago[deleted]
- JaceLightning 7y ago> Enter your email to check Uhhh this is definitely a scam
- Forge36 7y agoAgreed. I didn't enter my email during the census
- deleted 7y ago[deleted]
- larrywright 7y agoAlso, why would census data include a credit score? This is fishy.
- etrk 7y agoIt's asking for my email to check if my census data has been leaked? Email isn't even shown as a field in the leaked records. Is this site just harvesting emails?
- ben174 7y agoYea I think it is. It’s the second one I’ve seen like this on HN. Expect to see some emails come in shortly if you checked.
- fyrefoxboy12 7y agodon't think it's a scam. forbes covered it (https://www.forbes.com/sites/zakdoffman/2020/03/20/stunning-new-google-cloud-breach-hits-200-million-us-citizens-check-here-if-youre-now-at-risk/#35eeee4d8587 https://www.forbes.com/sites/zakdoffman/2020/03/20/stunning-...) although more neutrally than this title
- trobertson 7y agoAre we really still using Forbes as evidence? Forbes is blogspam. I need a much more credible source before handing over my email to this site.
- NelsonMinar 7y agoThis data sounds like it could have been someone's copy of the voter file, the database political groups keep on every American who can vote. Versions of that file have leaked before. There's some speculation some of the leaks have been deliberate, to illegally avoid campaign finance laws.
- oasisbob 7y agoThe detailed data schemes described in the article doesn't look like a voter file to me.
- salawat 7y agoGot a link? That sounds like interesting reading. (The explanation of how leaking a database of every voter's info helps exploit a loophole in campaign finance law, I mean, not the data.)
- dccoolgai 7y agoI don't have a link, but here's how that would work: there are strict limits (a few thousand per donor) on how much an official campaign can raise/spend. Outside/independent groups have no such restrictions (see Citizens United) - they could take a billion dollars from one donor and spend it all on behalf of one candidate. But what good would the official restrictions be if the campaigns could call the independents and say "buy a million dollars of ads for me". So there are also strict laws about "coordination". You can probably figure out the rest by yourself... But leaving the records in a place where they are "available to the public" provides plausible deniability to the coordination problem.
- teslademigod1 7y agosecond that - got a link? would be great to check it out
- ibigb 7y agoDoesn't Google know who is using their services? Who paid?
- packetslave 7y agosomeone with a stolen credit card, probably
- deleted 7y ago[deleted]
- jimthrow 7y agoFirst we are legally required to give them our info then they leak it
- deleted 7y ago[deleted]
- jellicle 7y agoThis doesn't have anything to do with the Census Bureau and isn't the current title of the page. ?? Yes, marketers have excellent info on all Americans and sell it to anyone. No, it doesn't have anything to do with the Census Bureau.
- maxminder 7y agoTechradar also posted about this leak https://www.techradar.com/news/major-data-breach-exposes-database-of-200-million-users https://www.techradar.com/news/major-data-breach-exposes-dat...
- maxminder 7y agohttps://twitter.com/troyhunt/status/1241464676921176064?s=19 https://twitter.com/troyhunt/status/1241464676921176064?s=19
- haltingproblem 7y agoI am certain that this is a scam. After having worked extensively with Census data there is no place, AFAIK, that the Census Bureau collates mortgage, credit and tax data or has the capability to. The datasets listed here sit in 3 disparate organizations - IRS, private banks and credit bureaus. There exists no mechanism to collate it in one place - you would need releases from individuals to get the credit data. IRS data is almost impossible to get (cf: DJT tax records). Finally, mortgage records are public but payment history sits with the banks.