yebyen

95 ms·

931.
by yebyen 9y ago
They don't need permission to store the identifying personal data about me for some reason (they, Equifax, the entity that I have no direct relationship with...) what was that reason exactly? Medical providers would not store your per
932.
by yebyen 9y ago
I'm personally more upset about their continued incompetence in their response to the breach, than about the breach itself. I'm sorry I can't write more right now... First they suppressed valuable information in the form of
933.
by yebyen 9y ago
It's interesting that "your" data is in quotes. I understand what you mean by "your" data and it's a valid point. It's not my data, not in this country anyway, even when it identifies me personally. Tha
934.
by yebyen 9y ago
No, it was clear, the point I was contesting was the first point that you quoted. I could have been clearer on why I was commenting. > The most available first-class address in the system is in a 32 bit address space. The most available
935.
by yebyen 9y ago
I'm not arguing that they weren't allowed to store the data. It would be less controversial apparently if I argued that Amazon grants a revokable license to consume the content on Prime Video and it is governed by the click-wrapp
936.
by yebyen 9y ago
I hope that we can start having that conversation! Right now it seems unlikely. It would not be so controversial if I claimed that Amazon grants customers a revokable license to audio and video content hosted on Prime, but my social securi
937.
by yebyen 9y ago
I disagree, you're citing an agreement between me and my bank. The bank may have authorized Equifax to store the data, but I did not. The bank was authorized to share the data (by me), and Equifax was authorized to store the data (by
938.
by yebyen 9y ago
Yes. Conceded. That is different than consenting to the credit bureaus storing those data points in perpetuity. It is an agreement with my bank. That lets my bank off the hook, not the negligent credit reporting agency Equifax. I must s
939.
by yebyen 9y ago
I'm supposed to provide examples that I am unfamiliar with? Forgive me for misunderstanding your comment, but `"base image" != "baseimage"` did not have a great deal of substance to it, nor did it provide me with an
940.
by yebyen 9y ago
It's a finer point, but if I have authorized Chase Bank to share data with a credit reporting agency, does that mean I have also authorized the credit reporting agency to retain that data? I don't think it does. Absent any law th
941.
by yebyen 9y ago
Me either! That's absolutely a valid point. And I am terrified that this breach will ultimately result in the end of the credit system as we know it, but right now taking such a position is still scare-mongering. (Very reasonable sc
942.
by yebyen 9y ago
The alternative is the two other credit agencies that haven't (as far as we know) given up all of our personal information to hackers, and who haven't responded to the news of the breach by linking some of their customers to a par
943.
by yebyen 9y ago
No, I have no contract with Equifax. Does that mean I don't have any standing in this discussion? You're being obtuse.
944.
by yebyen 9y ago
You know the point I'm trying to make, and it's disingenuous to point at some line in some far-away terms and conditions, and say "that authorizes Equifax and two other companies to collect and maintain all information on you
945.
by yebyen 9y ago
I never consented to have my information in their database, and I have no power to get it out of their database. They have roundly and repeatedly demonstrated that they are not fit to hold and be trusted with maintaining the SSNs and other
946.
by yebyen 9y ago
I'll be a happy man when the code and specs for this little guy become public: https://firefly.city ("Airgap" ETH wallet for $5)
947.
by yebyen 9y ago
The address space is 128 bit. You don't need a planet, but for a theoretical $10 price tag, why wouldn't you get one? (FWIW I have never seen anyone pay $10 for their planet.)
948.
by yebyen 9y ago
Like IPv4, it's a theoretical maximum that will be hard to reach because the number of allocations are divided up into blocks... Universe(Galaxy / Star / Planet / Moon) are the top 64 bits of the address space, so there
949.
by yebyen 9y ago
That's understandable. I just don't see how anything good comes from this breach unless we can get eyeballs on poor security practices. Because nobody else between you, me, and the wall seems to be paying any attention to this a
950.
by yebyen 9y ago
No way. There is no better or more tactful way to show how roundly incompetent the company is, and continues to be, than to put up a domain name that is confusingly similar to the already confusing, pointless, dangerous domain that they pu
951.
by yebyen 9y ago
You can go ahead and explain what you think base image means then, because it's not obvious to me how this is different than that (and I'm a domain expert.) A base image is an image that you're meant to build off of, it is no
952.
by yebyen 9y ago
I honestly don't know why they are allowed to handle the remediation and "damage control" at all, I've been saying that for over a week; it's been getting clearer and clearer that they do not have the operational ca
953.
by yebyen 9y ago
Non-US citizens won't be able to enter the last 6 digits of their US Social Security Number so the site is not going to be of value to you. (Although I'm not sure why they block Europe, there are certainly US citizens living abro
954.
by yebyen 9y ago
That's right. You'd only be forfeiting the right to sue in the event that they get hacked again. Which to be fair is looking decently probable at this point. Edit: I would like to know at this point, which got taken down faster
955.
by yebyen 9y ago
Is that really a question? No, I don't, I consider it to be unauthorized surveillance, but the fact is that Equifax blew this up, and now continues to demonstrate their organizational incompetence, while TransUnion and Experian are no
956.
by yebyen 9y ago
No offense inferred! It is not intended that users will download this baseimage (although it is a supported configuration, you can use FROM phusion/baseimage) but, that this will be an image definition that users can easily rebuild and
957.
by yebyen 9y ago
It's beginning to look a lot like "retiring" both the CISO and CIO right in the middle of a major security news event... may have been another bad decision! I'm with you, it's more criminal that after all they'
958.
by yebyen 9y ago
are you saying that most base images don't have ssl? because i'm a baseimage maintainer ( http://github.com/phusion/baseimage ) and I don't think that's true... https://github.com/phus
959.
by yebyen 9y ago
> I kind of wonder if the CEO chose his subordinates specifically to take the hit in a data breach situation like this. ^ This! They sure have shuffled the CIO and CISO out of the conversation quickly. I'm sure you can be a perfect
960.
by yebyen 9y ago
Here's a link to the video interview from CISO Susan Mauldin in 2016 that was erased from YouTube a few days ago, on September 10 after it was first reported: http://evilrouters.net/media/susan_mauldin_cazena_inter

More ›