7 ms·
LinkedIn breach reportedly exposes data of 92% of users, inferred salaries
- deregulateMed 5y agoPrivacy is trendy, but imagine if everyone had access to salary data. You find your coworker makes more money, you ask for more. Or if all medical data was public, we'd have a medical revolution in understanding. Or if your Facebook likes were public, other competing websites could generate a network easier. Sure there are downsides to open information, but I can't help to think that privacy benefits the few, openess benefits the masses. (Obligatory- doesn't apply to keys or whistleblowers, but I imagine they should be taking far greater precautions than using Apple who continuously bends to China and the US government)
- marcinzm 5y ago>Or if all medical data was public, we'd have a medical revolution in understanding. US medical billing data (which include who, where, what, why and when) is fairly easy to access (ie: 100+ million patients anonymized) and hasn't helped patients much from what I can tell. And many many companies have tried. >Or if your Facebook likes were public, other competing websites could generate a network easier. And oppressive governments can hunt down dissidents, hate groups can hunt down minorities, parents can disown their gay kids earlier, etc. Once you add up all the groups that make up "the few" you get rather a lot of people.
- rdtwo 5y agoIt’s probably not good enough to guess patient outcomes. It’s not like you could look up a surgeon and find how often the patient has a problem and then correct that against the risk pool of the patients
- marcinzm 5y agoI mean you literally can. Billing data included the doctor, the procedures performed, the diagnosis given, patient demographics (age, gender, zip code, etc.). Plus a whole bunch more. Very well structured data actually although there's biases in it. My last company literally did what you said using the data. Not enough money in it so it all goes nowhere and all the big players in the space don't really care. edit: You also have full medical billing history for each patient in the data set so you can build a historical risk profiles for patients.
- rdtwo 5y agoThat sounds like it would be a trivial to de-anonymize. Also I’d be curious how good medical experts actually think the data is. In my field i find that data that looks legit is often actually bad enough to the point of near uselessness because the incentives aren’t aligned with collecting accurate data
- marcinzm 5y agoThe incentives are with collecting data that insurance companies will not reject your payments over. If an insurance company noticed you're mis-billing then you lose money. They may request full medical records of patients to verify. Which incentives generally clean data although there are biases such as up billing and spurious diagnosis to get medication covered. Medical records themselves are a mess often but billing data is better since a lot of money is on the line. >That sounds like it would be a trivial to de-anonymize. In theory yes if you joined to other identified data sets but in practice doing so makes it a massive HIPAA violation with very large government enforce penalties. There's also enough contractual sanity checking and costs that no one who gets access would bother.
- marcinzm 5y agoI'd like to add that anonymized billing data has helped a lot of companies make a lot money. That however is separate from helping patients. Helping pharma companies better market medications to doctors makes a lot of money but is arguably a negative for patients.
- Faaak 5y ago> Or if all medical data was public, we'd have a medical revolution in understanding. No, your insurance premium would go up. That's it
- misja111 5y agoWhy? It could also go down.
- nerdponx 5y agoBecause there's no incentive for them to reduce prices.
- lotsofpulp 5y agoThere are many competing managed care organizations (health insurers). Healthcare cost increases slowed down after ACA: https://www.cbpp.org/blog/more-evidence-of-post-aca-slowdown-in-health-care-spending https://www.cbpp.org/blog/more-evidence-of-post-aca-slowdown... https://www.npr.org/2019/12/23/790687286/examining-health-care-spending-since-obamacare https://www.npr.org/2019/12/23/790687286/examining-health-ca...
- nerdponx 5y agoI believe the research, but I doubt the ACA slowed down increases due to competition. The studies you linked don't show evidence of it either. Most people do not get to shop for insurance. Individual market plans are all similarly and eye-wateringly expensive (last I checked). And people getting health coverage through work are lucky if they have even two insurers to choose between. Therefore I don't see any reason why insurance companies would uniformly lower their "baseline" premiums when given access to more information. If they were all competing for your business like car insurance, homeowner insurance, etc. things would be very different.
- lotsofpulp 5y ago
- kaibee 5y ago> Privacy is trendy, but imagine if everyone had access to salary data. Already true in Norway. https://www.bbc.com/news/magazine-40669239 https://www.bbc.com/news/magazine-40669239
- semi-extrinsic 5y agoLess true now than it used to be, they implemented a limitation after that article was published. Nowadays, if you try to check someone's salary, there is a big box on the website saying "The person you want to check the salary of will be notified that you checked. Do you want to proceed?" where I believe most people go "Nope, cancel that."
- gostsamo 5y agoOr you just find someone as a proxy and run all of your queries through them. Like, my grandma in the other end of the country. The other party can't do anything with this information.
- dabbledash 5y agoPrivacy benefits the few, openness benefits the masses = openness allows the masses to ferret out and punish deviance.
- waterheater 5y agoActually, privacy benefits the minority. This distinction is critical to remember.
- dabbledash 5y agoExactly. “Benefits the few” is just a negative / populist spin on “protects minorities.”
- semi-extrinsic 5y agoAt a place where I used to work, we noticed that the new project management and time tracking software, that had been rolled out to much fanfare, would let you check the salary of anyone in the company simply by editing the URL in the browser and reading the XML file it sent back. I've never seen IT fix anything that quickly.
- analyst74 5y agoIn a utopian world where everything is public, I can see how transparency can benefit the masses. However, realistically, the powerful will fight tooth and nail to retain secrecy, and those who open up first become vulnerable due to informational disadvantage.
- enriquto 5y agoSo, let's start by publishing the salaries of the rich, and then work down from that ;)
- trident5000 5y ago"imagine if everyone had access to salary data..." This is exactly why employers dont want this.
- baron_harkonnen 5y ago> You find your coworker makes more money, you ask for more. I used to believe this when I was younger. Many, many years ago I used to work for research team a state university. In most states all public employee salaries are public data and there are watch dog groups that collect this and post it online. Right now if you have a friend (or enemy) working at a state university you can probably find their salary. While working there, there was an IT/tech staff that was pretty incompetent who most people gave a really hard time. This person didn't have much formal education and didn't understand anything about their role, but I and some others always felt that "hey, they get paid next to nothing so don't give them such a hard time." Then someone looked up their salary and found they made more than most of the junior faculty in that department. The result wasn't a wide spread demand for more equitable pay, but universal anger that this kind but lazy employee was making more than the majority of the department. As much as I hated it, I myself immediately lost all pity I had for this person. End result was that nobody got paid more, and if we could have voted we probably would have argued that this person should have either been fired or paid less. Even if in theory workers should stick together, and even in an academic dept where most people understand this theory, we're still trained to turn against each other. In my experience the best way to share salary data is anonymously. https://www.levels.fyi/ https://www.levels.fyi/ radically changed my salary requirements, and it's incredible how many young people working in tech have no clue how much they could be asking for. Whenever I end up mentoring a junior tech worker I always make sure they understand how tech compensation works and what the upper bound really is. Most react at first with anger that they get paid little, but nearly all negotiate much harder when applying for their next job. Information is essential to increasing worker pay, but personal information can only result in pettiness and strife in my experience.
- enriquto 5y ago> we probably would have argued that this person should have either been fired or paid less. Does not sound like a healthy conclusion to me. Actually, a pretty shitty one. Not only they were bullied by most of their work colleagues, but they would conspire to lower their salary. The problem is not that salaries are public but that your work environment was really toxic. I hope they found a better place.
- mosburger 5y agoAt my current employer, everyone's salaries (and the number of options they've been awarded) are in a Google spreadsheet that's viewable by everyone in the company. It's actually kinda cool to have such transparency and has forced standardization of things, and I have to imagine it has reduced biases and made things fairer.
- seattle_spring 5y agoEvery company I've seen that has one of those pays jokingly low salaries compared to competitive companies. Rather than it being used as a tool to ensure fairness, it seems more used as a shield against negotiation. "We can't pay you <competitive salary>, that'd be $50k more than someone more senior than you! You wouldn't want to be unfairly paid more than your colleague, would you!?"
- kasey_junk 5y agoI worked at a hedge fund that had open salary data available to everyone and paid comparably to the hedge funds/prop desks I worked at that didn’t.
- underseacables 5y agoJust reminded me that I still have a linked in profile. I never use the service, so I’m going to delete this profile.
- dlsa 5y agoData within deleted accounts has a tendency to just disappear from access rather than actually get destroyed because companies like to be "helpful" in case you change your mind. Consider scrambling the data in the account first. Wait a few weeks then delete the profile. Consider also setting a canary email address before you delete the account so that when the final account data later resurfaces you at least know.
- stblack 5y agoThis is the best advice! "Deleting" an account has to be a systematic user-side process. We don't talk enough about that.
- trident5000 5y agoNeed a right to be forgotten 2.0 legislation in the US.
- civilized 5y agoI try to look on the bright side these days. Can't wait to find out all the weird stuff LinkedIn knows or has completely wild-ass guessed about me! And by the way, recently YouTube has been serving me exclusively Spanish-language ads. I am probably 0% Hispanic ethnically and have no knowledge of Spanish. Would be cool to get a data leak that shows what's up with that!
- nostoc 5y agoLooks like this data has been collected through the official API, so you could just query yourself in there.
- civilized 5y agoI'm too lazy, that's why I appreciate these hackers who go to all the trouble on my behalf for free!
- tylerfontaine 5y ago> recently YouTube has been serving me exclusively Spanish-language ads This has been happening to me, but on Twitter! I know a very basic amount of Spanish, but am a non-hispanic dude in semi-rural Texas.
- JKCalhoun 5y ago> semi-rural Texas Pattern matched.
- StevenRayOrr 5y agoI started having a similar issue with Spotify a couple years ago. Eventually I discovered that someone else was using my (free) account to listen to bunch of Spanish-language music that I'd never heard of. I don't think my Spotify recommendations ever recovered.
- JKCalhoun 5y agoLOL, w-a-y b-a-c-k when it was only your name and address that was sold to marketers and the spam was snail mail, friends and I would sing up for things, order catalogs etc. using a different name each time. Then when the junk mail came you knew who sold you out.
- dlsa 5y agoMeanwhile, in Norway... Norway: The country where no salaries are secret https://www.bbc.com/news/magazine-40669239 https://www.bbc.com/news/magazine-40669239 Removing anonymity of searching made a significant difference as did letting you know who looked you up. This is a form of social pressure that seems to balance out their need for transparency versus the "peeping tom" aspect of open salary data. There are some less than good social impacts but I'd say on balance the overall result is positive. I actually think any job ad without a salary indication should be seen with suspicion and mistrust. Its basically false or deceptive advertising. Its like going to a shop to buy some fruit but them being sheepish about the price. Negotiations then ensue and you give them an offer and they say "that isn’t realistic". But you easily counter with "well you should have listed the price". The ensuing negotiation includes sich phrases as "you should know the market" and all sorts of "competitive market" slogans. In the end they simply want to clamp the price down and take advantage of ignorance rather than any kind of ethical stance. We tolerate this unethical behavior because "that's how it is".
- mywittyname 5y agoYou all don't have an issue with sites reselling the salary data in an anonymized fashion to those "Peeping Tom" types?
- TrackerFF 5y agoYes and no - up until a few years ago, this kind of snooping was anonymous, but that changed, and right now you can see who's been looking/snooping through your profile. Some people figured that they can charged a couple of bucks to do that for you, but I wouldn't say that it is any large or serious business.
- axc10 5y agoThe level of population control in some of these smaller European countries like Norway and The Netherlands is insane. They always try to project a progressive and relaxed image, but you better do not try to deviate from the norm. The norm is: Work for a low salary, buy a tiny overpriced house from the ruling classes, eat sandwiches with peanut butter and celebrate Queen's day. Surveillance levels are high but covert, extrajudicial punishment is enshrined in the law.
- bttrfl 5y agoWere those phone numbers collected using "We need your phone number to increase your security" (or similar) or just added by users to their linkedin profiles?
- JKCalhoun 5y ago> "We need your phone number to increase your security" Lies and liability.
- idorosen 5y agoduplicate: - https://news.ycombinator.com/item?id=27675648 https://news.ycombinator.com/item?id=27675648 - https://news.ycombinator.com/item?id=27674393 https://news.ycombinator.com/item?id=27674393
- Ashanmaril 5y agoIs LinkedIn actually an important thing to have? I made one years ago and used to occasionally go in and update it, but with my most recent job I didn't even take the time to add it. The past few years I've really re-evaluated what should be public, easily-accessible information for anyone who knows my name. And all I get from having an account is recruiter spam, and emails for connection requests that are oddly written in first-person and have the person's name as the sender which seems weird.
- binarymax 5y agoYou get out what you put in. If you have a languishing account and don’t use it then you’ll get what you describe. If you are active then it gives you opportunities to network and meet people with similar interests.
- thewhitetulip 5y agoI got a job at a very good company through LinkedIn A guy had posted about opening in the company. I sent profile, he referred me and I joined a few months ago. It was a blind referral. I didn't know the guy or that they had an opening!
- MattGaiser 5y agoI find it quite valuable to get information about companies.
- booleandilemma 5y agoI did get a job through LinkedIn once, so I think so. It’s certainly more valuable than Facebook.
- cmckn 5y agoI got my current job because a recruiter found me on LinkedIn. I participated in a “hiring day” that greatly increased my odds of getting an offer. Doubled my salary and it was an invaluable step for my career. I spent maybe 15 minutes setting up the profile after a few years of rolling my eyes at the platform. It’s worth it; much easier to get an interview than sending an application into the void.
- legulere 5y agoAny website already up to check if you were in that breach?
- Taylor_OD 5y agoYou should shut down your linkedin if you are not actively looking for a job. It's a public resume which is a security concern at best.
- EricE 5y ago"There is no cloud, just someone else's computer" Probably my favorite sticker/meme.
- tymekpavel 5y ago“Breached” seems like a strong word: “ LinkedIn tells Bloomberg in a statement that it looked into the matter and found that the data was web scraped public information from its site and other platforms.” So they scraped a bunch of websites including LinkedIn and created a joint dataset?