DNA companies should receive the death penalty for getting hacked | TechCrunch::Personal data is the new gold. The recent 23andMe data breach is a stark reminder of a chilling reality – our most intimate, personal information might
Maybe you shouldn’t use the same user+pass across dozens of different services then.
The data from 23 and Me was stolen using the legitimate login credentials of users acquired from an entirely different services data breach. Not via their own lax security policies.
You can’t expect a corporation to protect you from yourself. And they certainly shouldn’t be punished for your ineptitude.
Don’t get me wrong, these corporations are not your friends, and shouldn’t be trusted implicitly; but you have some responsibilities too.
/edit:
But when the chips are down and our data is leaked, they hide behind the old “we were not hacked; it was the users’ old passwords” excuse.
This logic is equivalent to a bank saying, “It’s not our fault your money got stolen; you should have had a better lock on your front door.” It’s unacceptable and a gross abdication of responsibility.
I completely disagree with this point. The service obviously has to provide you with access to your information/account. If you give out your login credentials for that access to a third party (another service), that third party loses your information, and it’s then used to access stuff posing as you. That’s your fault. You should not have shared (re-used) those same login credentials with others.
Well they should have 2fa, but yes, if that’s the case I agree with you.
Use Bitwarden or KeePass
Unfortunately, even that’s not enough. That’s often a user choice to enable, and otp itself is a flawed system. (be that email, sms, or timed)
Really, services should be transitioning to Passkeys, however adoption of a new standard always takes time. There are not a huge number of services that have implemented them yet. Here’s a list
While a one-time passcode can be lost or stolen, nobody can steal your face.
Thanks for the link, I wanted to read up on passkeys since the other day, as GitHub asked me to set one up with Bitwarden
I swear this headline was just a comment the last time this got posted…
This logic is equivalent to a bank saying, “It’s not our fault your money got stolen; you should have had a better lock on your front door.”
Isn’t that exactly what the bank would tell you if someone stole your personal info from your home and used it to empty your account?
This author is a dumbass.
The 23andMe breach saw hackers gaining access to a whopping 6.9 million users’ personal information, including family trees, birth years and geographic locations. It brings to the fore a few significant questions: Are companies really doing enough to protect our data? Should we trust them with our most intimate information?
Well . . . NO. But that has never not been the case. These fucking cheese-brained twits who pour out every scrap of personal - and genetic! - info to the tatty basket of whatever Zuckerberg their moron friends are using has been a problem from day one.
Nothing has changed. Google is evil, Twitter went fascist, facepals is an arm of the FSB, and All Your Genes Are Belong To Us. No fucking shit.
Using computers for everything requires understanding them and most. People. Don’t.
I like entertaining the idea that purchasing technology should require some form of license like a firearm.
The only problem with the idea is that I would probably be out of a job pretty quick, given no one would be able to use computers.
Many of my friends and family sent their DNA away to these outfits. Early on I just ruled it out as I heard they were able to link cold cases to people in these databases. Combine that with the grave miscarriages of justice when they railroad people into convictions my “I haven’t done anything to worry about” still did not want to be a part of that machine.
I didn’t even think of this reality which is pretty bad. I’m glad I didn’t sign up despite some interest in knowing more about my fractured family connections.
They don’t need your DNA to connect you to solve a cold case. They determine we shares tiny chunks of DNA with a sample from a crime. With that, they find the family tree of the known person and can often determine who the guilty party is.
As in they know the suspect shares a paternal great grandfather with this person and a maternal great great grandmother with that person so we know it’s one of these people. Then the police collect trash to find who from the limited pool the crime DNA belongs to.
That’s some Minority Report type shit, scary stuff.
Collecting evidence after a crime is the opposite of Minority Report.
Bring out the guillotines!
deleted by creator
Life in prison for the executives.
Because users used bad passwords and had their accounts logged into by with these legitimate passwords…?
Seems like misinformed outrage to me.
