4 ms·

I still need to hear a real world case where data breaches are harmful other than annoying spam SMS. EDIT: re the downvotes - I guess it's ok to ask crypto peo

by baxtr 5y ago

I still need to hear a real world case where data breaches are harmful other than annoying spam SMS. EDIT: re the downvotes - I guess it's ok to ask crypto people all the time about real world cases but then not to accept any questions about real world cases elsewhere...

batch12 5y ago
Could you post your full contact details? I am looking for your name, address, date of birth, and phone number. If it isn't too much trouble, please include all email addresses and relevant passwords, your tax ID, mother's maiden name, usual prompts and answers to security questions and your SSN if in the US.
kreetx 5y ago
The do give some legitimate attack vectors in the article.
amelius 5y ago
Identity theft ...
piva00 5y ago
Real world case: 2 friends from Brazil got their identity stolen after a governmental database leak, thieves opened up a few credit lines and now both are fighting to get their credit history cleaned up. It's been more than a year, they have a pretty strong case to get rid of it but... Brazilian bureaucracy is slow and convoluted, it's been more than a year and neither can get any credit and get non-stop calls from banks and collection agencies.
- mbg721 5y ago
  At some point, the scammers have to kill the golden goose...credit ratings are only useful to the extent that they're trustworthy.
  - edoceo 5y ago
    Lots of innocents get harmed in that process. Would rather a different solution.
    - mbg721 5y ago
      Oh, totally in agreement with you there; consumer credit is toxic and dehumanizing to begin with. But I think the fraud potential is what will make it go away; smaller players will stop taking credit seriously, and government and megacorps will come up with something more invasive.
Shamii 5y ago
Sooo let's stop telling companies that security is critical? Someone could have sent out 200k emails to steal money from 200k people. I also store all leaked data just for fun. Guess what someone can do when they are out for you? Writing an API which doesn't leak is very easy. I think it's reasonable to keep security.
ceejayoz 5y ago
A data breach at your bank, insurance company, etc. allows for much more targeted phishing attacks. I get calls from “Visa and Mastercard customer service” because they don’t know which one I have and are playing the numbers game. “Hi Mr. ceejayoz, I’m calling from Chase about account x2093” with Chase’s 1-800 spoofed on caller ID will catch a lot more people.
ozim 5y ago
The downvotes are coming because your comment comes over as shallow. For you or for bunch of people on HN or that are somewhat tech literate it might be a mere annoyance. There is far more people who have email/phone number but they don't understand much more. They get scammed every week or two as I read on local news. Scammers get free information that can be used to target a person and they use it. Just type into google "man scammed out of life savings" https://abc7chicago.com/remote-access-bank-account-scam-phone/10614378/ https://abc7chicago.com/remote-access-bank-account-scam-phon...

by baxtr 5y ago

batch12 5y ago

Could you post your full contact details? I am looking for your name, address, date of birth, and phone number. If it isn't too much trouble, please include all email addresses and relevant passwords, your tax ID, mother's maiden name, usual prompts and answers to security questions and your SSN if in the US.

kreetx 5y ago

The do give some legitimate attack vectors in the article.

amelius 5y ago

Identity theft ...

piva00 5y ago

Real world case: 2 friends from Brazil got their identity stolen after a governmental database leak, thieves opened up a few credit lines and now both are fighting to get their credit history cleaned up. It's been more than a year, they have a pretty strong case to get rid of it but... Brazilian bureaucracy is slow and convoluted, it's been more than a year and neither can get any credit and get non-stop calls from banks and collection agencies.

mbg721 5y ago
At some point, the scammers have to kill the golden goose...credit ratings are only useful to the extent that they're trustworthy.
- edoceo 5y ago
  Lots of innocents get harmed in that process. Would rather a different solution.
  - mbg721 5y ago
    Oh, totally in agreement with you there; consumer credit is toxic and dehumanizing to begin with. But I think the fraud potential is what will make it go away; smaller players will stop taking credit seriously, and government and megacorps will come up with something more invasive.

Shamii 5y ago

Sooo let's stop telling companies that security is critical? Someone could have sent out 200k emails to steal money from 200k people. I also store all leaked data just for fun. Guess what someone can do when they are out for you? Writing an API which doesn't leak is very easy. I think it's reasonable to keep security.

ceejayoz 5y ago

A data breach at your bank, insurance company, etc. allows for much more targeted phishing attacks. I get calls from “Visa and Mastercard customer service” because they don’t know which one I have and are playing the numbers game. “Hi Mr. ceejayoz, I’m calling from Chase about account x2093” with Chase’s 1-800 spoofed on caller ID will catch a lot more people.

ozim 5y ago

The downvotes are coming because your comment comes over as shallow. For you or for bunch of people on HN or that are somewhat tech literate it might be a mere annoyance. There is far more people who have email/phone number but they don't understand much more. They get scammed every week or two as I read on local news. Scammers get free information that can be used to target a person and they use it. Just type into google "man scammed out of life savings" https://abc7chicago.com/remote-access-bank-account-scam-phone/10614378/ https://abc7chicago.com/remote-access-bank-account-scam-phon...