5 ms·

No company will avoid being hacked. If you don't want your info leaked, don't share it. The more sensitive it is, the more you should think twice. It may be a

No company will avoid being hacked. If you don't want your info leaked, don't share it. The more sensitive it is, the more you should think twice. It may be a couple years yet until the big teleheath hacks come out, and you discover all those private disclosures are sold for pennies on the dark market, or just leveraged by adversaries.

thatguy0900 3y ago
The ultimate problem with this though is that if your family members do it, they basically have your info too.
- quantified 3y ago
  That's part of it. I know I'm in there even though I haven't signed up for it. Like Clearview will know me everywhere because somebody's put up photos on FB with me in them somewhere.
sneak 3y ago
Your biometrics, including your DNA, are not sensitive or private. You leave your DNA at every restaurant you visit, and you display your biometrics in every public place. They are not remotely secret or private or sensitive.
- sonicanatidae 3y ago
  While DNA is left behind, I have yet to see a waitress run to the back with a sample, and run it through DNA marker identification. This also assumes it's a clean sample and not contaminated with all the other DNA present, simple dust, residue on the surface of whatever the DNA was pulled from and/or whatever. I'm not saying it's not possible, I'm saying that it's very, very, very unlikely, at least for mortals. Source: I worked in 2 labs, one of which did genetic testing. Note: I'm IT, not science, so I was the person that setup the reporting triggers, output, input, etc. I do know something about taking samples and swiping them from a glass isn't the typical way, for many, many reasons.
- ggus 3y ago
  The association between your DNA and your name and contact details IS both sensitive and private though. Let's not be disingenuous: the dna companies don't just store dna snapshots. they store it along with a bunch of other data, ant this becomes problematic.
sonicanatidae 3y ago
>No company can avoid being hacked. 100% with you on this. Sec has to get it right, every. single. time. and that's not realistic. No one gets it right every single time. I'm not even getting into 0day and similar. However, companies that are callous with your data and their own sec, like Equifax was, should suffer more than the current fine of a nickel, then it's on to BONUSES, with no other repercussions. Lastly, according to the horrifically bad CU ruling, corps are practically humans, in every sense that gains them an advantage, but somehow magically immune in situations where they might find the slightest difficulty.
- josefritz 3y ago
  True. However, their abdication of responsibility is indicative of a lack of a security culture. It's hard to say that they were more or less negligent than Equifax, but both data sets should have been Highly secure. It's also interesting that outside of the US their lack of security would open them to criminal liabilities under GDPR.
  - sonicanatidae 3y ago
    Equifax was more negligent. No doubt. EQ left default credentials intact on a public facing database. 23 was cred stuffed, which is still not good, but not the same level of negligence. US laws are a sad tragedy of the rich fucking the not rich harder and harder and harder every decade.
celdon25 3y ago
You're not required to "share it" at Nebula - https://nebula.org/technology/ https://nebula.org/technology/ "Our anonymous sequencing service enables our users to sign up, submit their samples, and receive their genetic reports without ever personally identifying themselves."
speedylight 3y ago
It doesn’t matter whether you share it or not, the DNA of a close relative can be used to figure out your own DNA. I don’t know how the actual technique really works, but I know it’s possible and it was used to catch the golden state killer.

thatguy0900 3y ago

The ultimate problem with this though is that if your family members do it, they basically have your info too.

quantified 3y ago
That's part of it. I know I'm in there even though I haven't signed up for it. Like Clearview will know me everywhere because somebody's put up photos on FB with me in them somewhere.

sneak 3y ago

Your biometrics, including your DNA, are not sensitive or private. You leave your DNA at every restaurant you visit, and you display your biometrics in every public place. They are not remotely secret or private or sensitive.

sonicanatidae 3y ago
While DNA is left behind, I have yet to see a waitress run to the back with a sample, and run it through DNA marker identification. This also assumes it's a clean sample and not contaminated with all the other DNA present, simple dust, residue on the surface of whatever the DNA was pulled from and/or whatever. I'm not saying it's not possible, I'm saying that it's very, very, very unlikely, at least for mortals. Source: I worked in 2 labs, one of which did genetic testing. Note: I'm IT, not science, so I was the person that setup the reporting triggers, output, input, etc. I do know something about taking samples and swiping them from a glass isn't the typical way, for many, many reasons.
ggus 3y ago
The association between your DNA and your name and contact details IS both sensitive and private though. Let's not be disingenuous: the dna companies don't just store dna snapshots. they store it along with a bunch of other data, ant this becomes problematic.

sonicanatidae 3y ago

>No company can avoid being hacked. 100% with you on this. Sec has to get it right, every. single. time. and that's not realistic. No one gets it right every single time. I'm not even getting into 0day and similar. However, companies that are callous with your data and their own sec, like Equifax was, should suffer more than the current fine of a nickel, then it's on to BONUSES, with no other repercussions. Lastly, according to the horrifically bad CU ruling, corps are practically humans, in every sense that gains them an advantage, but somehow magically immune in situations where they might find the slightest difficulty.

josefritz 3y ago
True. However, their abdication of responsibility is indicative of a lack of a security culture. It's hard to say that they were more or less negligent than Equifax, but both data sets should have been Highly secure. It's also interesting that outside of the US their lack of security would open them to criminal liabilities under GDPR.
- sonicanatidae 3y ago
  Equifax was more negligent. No doubt. EQ left default credentials intact on a public facing database. 23 was cred stuffed, which is still not good, but not the same level of negligence. US laws are a sad tragedy of the rich fucking the not rich harder and harder and harder every decade.

celdon25 3y ago

You're not required to "share it" at Nebula - https://nebula.org/technology/ https://nebula.org/technology/ "Our anonymous sequencing service enables our users to sign up, submit their samples, and receive their genetic reports without ever personally identifying themselves."

speedylight 3y ago

It doesn’t matter whether you share it or not, the DNA of a close relative can be used to figure out your own DNA. I don’t know how the actual technique really works, but I know it’s possible and it was used to catch the golden state killer.