Live data from Hacker News

Gigabytes of user data from hack of Patreon donations site dumped online

arstechnica.com

141–150 of 151 posts

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#141
post #55

Earlier quoted context omitted.

So content creators should use PayPal then for donations? That's also a centralized service. How do you propose a transaction takes place without a service to process the details?

Simple standard bank transaction? If you want to support the creator regularly, you can easily set that up as well.

The US is a big market and, unfortunately, the kind of bank transaction I think you have in mind isn't a thing here. We still use checks.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#143
This could be quite a scary prospect. There are certain anonymous and controversial artists who have solicited and received donations through Patreon. Some of these artists remain anonymous because of the controversial nature of their work. I think this is a scary prospect for both patrons and artists.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#144

So what of importance is in their database that one could not find by otherwise searching the web? From the email i received from patreon i reckon the only actual private thing is the exact sum i pay to who. Some find addresses to be private, but at-least in my case any one can find where i live by looking on the local yellow pages website.

It probably enables doxxing of anonymous artists and their patrons.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#145

That's pretty devastating to anybody who gave up their data to support things they enjoy. I would really like to see services getting hit with massive fines so they actually "take security very seriously" before they get owned. It's far too late to care about it now, there's a lot of compromising data in that leak.

How do you distinguish someone who was lax with their security from someone who actually takes it seriously and still got hacked?

The law makes those kinds of distinctions all the time. For example, when someone dies at work the first thing the government tries to figure out is whether it was just bad luck or the company was being sloppy.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#146

Earlier quoted context omitted.

It said the guys name in the subdomain that this was available on. I can only imagine how that guy must feel, worst thing that I can imagine happening as a dev. We've all made stupid mistakes and not paid a price as high as this!

Mistakes happens. But it should not be possible to put production data in publicly accessible systems by mistake. Not without committing a criminal offense, at the very least. Your customer data is your customers' data. It's not yours to toy with as you please.

>Your customer data is your customers' data. It's not yours to toy with as you please.

That's the European point of view. In the US, customer data is nothing more than an asset.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#147

So what of importance is in their database that one could not find by otherwise searching the web? From the email i received from patreon i reckon the only actual private thing is the exact sum i pay to who. Some find addresses to be private, but at-least in my case any one can find where i live by looking on the local yellow pages website.

Some GamerGate supporters have made claims that video game reviewers have covered games and develelopers that they have backed financially through Patreon without disclosing this to their audience. This disclosuee would allow those making that claim to demonstrate if their claims are accurate, and it allows those about whom the claim is made to demonstrate that the claim is inaccurate.

Aren't patrons public, though?

The only relevance to gamergate is that they'd be able to doxx people who support figures they don't like.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#148

So what of importance is in their database that one could not find by otherwise searching the web? From the email i received from patreon i reckon the only actual private thing is the exact sum i pay to who. Some find addresses to be private, but at-least in my case any one can find where i live by looking on the local yellow pages website.

Some GamerGate supporters have made claims that video game reviewers have covered games and develelopers that they have backed financially through Patreon without disclosing this to their audience. This disclosuee would allow those making that claim to demonstrate if their claims are accurate, and it allows those about whom the claim is made to demonstrate that the claim is inaccurate.

Do GG accusations actually matter anymore? Does anyone still care besides the people actually making the accusations?

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#149
post #59

Earlier quoted context omitted.

Fines? It would do more damage than good(if there's any good that is). One of the best things about the information age is the ability for anyone to take part in it. You could be selling glow sticks to a guy a thousand miles away from you. If there were fines, it would scare away people with less technical skills who would want to start something new. What we must do is introduce certifications, this would help make…

If you're an inexperienced startup then perhaps you shouldn't be taking risks with my data. If I bought glowsticks at the mall and they injured me when I used them I would expect consumer protection laws to issue fines to make selling them too risky a venture, why shouldn't I be protected by a similar mechanism for injury caused by leaky data?

omg, stop being such babies. You can't run a startup without risk, I am sure you have been around the startup world to notice how much risk these startups take in order to be successful, as a society we should encourage people to take more risks, and help them, not become a barrier to their success.

Re: Gigabytes of user data from hack of Patreon donations site dumped online

#150
post #149

Earlier quoted context omitted.

If you're an inexperienced startup then perhaps you shouldn't be taking risks with my data. If I bought glowsticks at the mall and they injured me when I used them I would expect consumer protection laws to issue fines to make selling them too risky a venture, why shouldn't I be protected by a similar mechanism for injury caused by leaky data?

omg, stop being such babies. You can't run a startup without risk, I am sure you have been around the startup world to notice how much risk these startups take in order to be successful, as a society we should encourage people to take more risks, and help them, not become a barrier to their success.

I don't want to encourage anyone to take more risks with my life, thank you very much
Post reply on HN