2 ms·

Let me make sure I've got this right before I shred you. 14,000 users messed up. As a result, hackers were able to log in to 23andMe's computers as those user

• dpkonofa 3y ago
  This is the part you don't have right: >approximately all of which did nothing wrong They shared some of their data with the users who messed up. All of their info wasn't accessible. The only data that was accessible was the data that was shared with these users - in other words, opting in to sharing data with total strangers (which could be argued but is the #1 use case for 23andMe).
  • AnimalMuppet 3y ago
    Ah, I see. So if you want to let user A share info with user B (and as you say, that's likely an essential use case for 23andMe), then 23andMe either 1) cannot let user B mess up, 2) cannot let user A share with user B, or 3) cannot protect user A. Of those options, 1) is impossible, though they could perhaps have done more to make it harder. 2) ruins a major use case. That leaves 3)...
    • dpkonofa 3y ago
      Yeah… you can’t protect users from themselves and, apparently, others.