4 ms·

it’s rumored as hilton denied it. Regardless, if its true, what should people do whose data is leaked? Is it okay if your primary email, phone number and email

by sss111 4y ago

it’s rumored as hilton denied it. Regardless, if its true, what should people do whose data is leaked? Is it okay if your primary email, phone number and email address are out there in the wild?

criddell 4y ago
> Is it okay if your primary email, phone number and email address are out there in the wild? They probably already were out in the wild. It seems hard to believe but back when people had landlines, just about everybody was listed in the phone book -- name, address, and phone number.
- macintux 4y ago
  Well, sort of. One name was. And some people paid to be unlisted. And that address was static, typically discoverable by other means, instead of a digital object that could locate you 24x7 anywhere in the world.
- deleted 4y ago
  [deleted]
- bluGill 4y ago
  You got to choose the name you were listed in. My grandpa always used his initials because he knew some old widows in the 1950s who didn't want scammers to know only a woman lived there which they could guess by a girls name when every other entry in the phone book was clearly a man's name. (make sure you read the above in your 1950's culture thinking, it won't make sense in the mode of modern culture)
  - brycewray 4y ago
    By the same token, many such widows from that era — and, in many cases, later on — simply never changed their phone listings after they became widows. I recall my hometown’s phone listings containing many long-dead guys’ names for precisely that reason.
ceejayoz 4y ago
> Is it okay if your primary email, phone number and email address are out there in the wild? Everyone's is. That ship has sailed.
chaoz_ 4y ago
"We're all so comprehensively pwned that if an email address isn't pwned, there's a good chance it doesn't belong to a real human." https://www.troyhunt.com/pwned-or-bot/ https://www.troyhunt.com/pwned-or-bot/
- buro9 4y ago
  that really only applies to people with 1-3 email addresses, where heavy re-use means that any breach likely made it public. for those with an email address per-service, it's not true at all - and even when an email is leaked it is trivial to shut that email down. in the past the guidance was don't re-use your passwords - I posit that the guidance should now be don't re-use your email addresses.
  - bluGill 4y ago
    Most people with more than 1-3 email address have one account that has a publicly documented form to get unlimited email address. If you use gmail there are two ways to add an alias: the plus sign and adding dots between letters. It is trivial for anyone to check for a plus sign in an email address, and change the part after it thus giving themselves are different alias that you probably don't have blocked. Or they can yourName+evilCompany@gmail.com to yoirName=goodCompanyWeWantToFrame@gmail.com. Because this is so obvious I do not consider email per service useful unless you can cheaply create aliases that are not related to your main email, and adding aliases is not and automatic scheme, but instead. You have to do all of them or the entire scheme is useless, and the effort is high enough that I doubt the average person would do this even if we made it easy. Don't forget that you also need to select the right account to send from for each message while you think the place is not evil.
Spooky23 4y ago
There’s not much for you to do on the surface. The real risk is that there’s backend integration between multiple systems. It’s a nexus between airline and other systems, and if you are a person with personal security concerns who hasn’t really thought about this scenario, you need to think because you’re compromised.

by sss111 4y ago

it’s rumored as hilton denied it. Regardless, if its true, what should people do whose data is leaked? Is it okay if your primary email, phone number and email address are out there in the wild?

criddell 4y ago

> Is it okay if your primary email, phone number and email address are out there in the wild? They probably already were out in the wild. It seems hard to believe but back when people had landlines, just about everybody was listed in the phone book -- name, address, and phone number.

macintux 4y ago
Well, sort of. One name was. And some people paid to be unlisted. And that address was static, typically discoverable by other means, instead of a digital object that could locate you 24x7 anywhere in the world.
deleted 4y ago
[deleted]
bluGill 4y ago
You got to choose the name you were listed in. My grandpa always used his initials because he knew some old widows in the 1950s who didn't want scammers to know only a woman lived there which they could guess by a girls name when every other entry in the phone book was clearly a man's name. (make sure you read the above in your 1950's culture thinking, it won't make sense in the mode of modern culture)
- brycewray 4y ago
  By the same token, many such widows from that era — and, in many cases, later on — simply never changed their phone listings after they became widows. I recall my hometown’s phone listings containing many long-dead guys’ names for precisely that reason.

ceejayoz 4y ago

> Is it okay if your primary email, phone number and email address are out there in the wild? Everyone's is. That ship has sailed.

chaoz_ 4y ago

"We're all so comprehensively pwned that if an email address isn't pwned, there's a good chance it doesn't belong to a real human." https://www.troyhunt.com/pwned-or-bot/ https://www.troyhunt.com/pwned-or-bot/

buro9 4y ago
that really only applies to people with 1-3 email addresses, where heavy re-use means that any breach likely made it public. for those with an email address per-service, it's not true at all - and even when an email is leaked it is trivial to shut that email down. in the past the guidance was don't re-use your passwords - I posit that the guidance should now be don't re-use your email addresses.
- bluGill 4y ago
  Most people with more than 1-3 email address have one account that has a publicly documented form to get unlimited email address. If you use gmail there are two ways to add an alias: the plus sign and adding dots between letters. It is trivial for anyone to check for a plus sign in an email address, and change the part after it thus giving themselves are different alias that you probably don't have blocked. Or they can yourName+evilCompany@gmail.com to yoirName=goodCompanyWeWantToFrame@gmail.com. Because this is so obvious I do not consider email per service useful unless you can cheaply create aliases that are not related to your main email, and adding aliases is not and automatic scheme, but instead. You have to do all of them or the entire scheme is useless, and the effort is high enough that I doubt the average person would do this even if we made it easy. Don't forget that you also need to select the right account to send from for each message while you think the place is not evil.

Spooky23 4y ago

There’s not much for you to do on the surface. The real risk is that there’s backend integration between multiple systems. It’s a nexus between airline and other systems, and if you are a person with personal security concerns who hasn’t really thought about this scenario, you need to think because you’re compromised.