Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The OPM Data Breach [pdf]

oversight.house.gov

Post reply on HN
Print view View original

111–120 of 131 posts

Re: The OPM Data Breach [pdf]

#111

Post by mtgx »

tptacek wrote: post #17
loteck wrote: post #12

Earlier quoted context omitted.

Let's be fair: while the source may well be partisan, it is also a technical document. Referring to it simply as a partisan political document doesn't acknowledge its full contents or its value to a technical community.

It is not a technical document. It is a document that contains technical details. For instance: it contains a formal set of "findings", as in the "findings" of law and fact in a trial. Here's one of the first findings: FINDING: Slow implementation of critical security requirements such as dual factor authentication is a true case of misplaced priorities. That's not technical language. It's not even formal language. O…

That's ridiculous. The OPM data breach was the largest in the US government's history.

If even that, which most of the intelligence and law enforcement officials have said is a catastrophe that won't be fixed for a generation, shouldn't be portrayed in the "worst light possible", then what should?

Enough with the partisan crap. This happened on those people's watch. Regardless of which party named them as the leaders of the OPM, they should be heavily criticized for it.

In fact, I'm actually quite angry myself at the fact that the Obama administration tried to downplay this for as long as possible last year. You actually didn't see much about it in mainstream media, and only some of it in tech media. All because Obama may have not wanted to be remembered as the president on whose watch the OPM breach happened.

So what I get from this is that you're the partisan one, not the OPM report.

Re: The OPM Data Breach [pdf]

#112

Post by enkid »

biafra wrote: post #110
oneplane wrote: post #109

Earlier quoted context omitted.

In the US, most things are based on credit and not on actual money you have. If your credit is bad you can't do basic things like get a car, a house or a loan. If your identity is stolen someone else can do things in your name, and for example not pay back a loan. This causes your credit rating to sink, on top of the other problems (like people coming to your house because you didn't pay them). If you check out http:…

I get that credit scores are important. They are also in Germany. But what does credit protection do? Pay all the debts? Fix my score with all rating agencies?

It monitors your credit score for unusual lending to stop fraud. Normally, they also include insurance to cover any fraudulent activity associated with your identity.

Re: The OPM Data Breach [pdf]

#113

Post by mtgx »

streptomycin wrote: post #64
loteck wrote: post #4

"Additionally, fingerprint data of 5.6 million of these individuals was stolen." They'll need to change their fingerprints immediately!

The letter they sent me claimed that there is currently no way to create fake fingerprints, so there's nothing to be worried about, 2 years of identity theft monitoring is good enough.

They lied to you. But what else is new.

Re: The OPM Data Breach [pdf]

#114

Post by brainfire »

gk1 wrote: post #74
forrestbrazeal wrote: post #53

One of the most frustrating things about this whole fiasco is that the OPM breach finally became public in the summer of 2015, but I and many other victims weren't officially notified (or offered our measly couple years of identity protection) until December or later. At the time, I shared some of my thoughts on the breach here (some of the info may be out of date in light of the new report; I was piecing stuff toget…

I still never received any notice about it. Was employed by DoD in late 00's, so am fairly certain my info was in the batch.

I believe Defense had their own, parallel system, so it may not be a given that you're in the leak.

Re: The OPM Data Breach [pdf]

#115

Post by nommm-nommm »

biafra wrote: post #103
redwards510 wrote: post #75

Earlier quoted context omitted.

I just got my postcard informing me I was affected last month. I tossed the offer of credit protection because I'm already stacking multiple "we're sorry" credit protections from other breaches. The thing that burns me though, is that the credit protection is for a limited time. The severity of this breach and they can't give us a lifetime of protection?!?

What is "credit protection"?

They will email you if you have a new inquiry or new account on your credit report(s). They will help you remove incorrect information and sometimes provide some financial assistance getting your documents replaced. Other than that they don't do much. They can't prevent someone from opening an account (only a credit freeze does that) and they can't tell you about non-credit identity theft.

Re: The OPM Data Breach [pdf]

#116

Post by nommm-nommm »

brainfire wrote: post #114
gk1 wrote: post #74

Earlier quoted context omitted.

I still never received any notice about it. Was employed by DoD in late 00's, so am fairly certain my info was in the batch.

I believe Defense had their own, parallel system, so it may not be a given that you're in the leak.

Cleared employees are in the OPM data leak.

Re: The OPM Data Breach [pdf]

#117

Post by forrestbrazeal »

gk1 wrote: post #74
forrestbrazeal wrote: post #53

One of the most frustrating things about this whole fiasco is that the OPM breach finally became public in the summer of 2015, but I and many other victims weren't officially notified (or offered our measly couple years of identity protection) until December or later. At the time, I shared some of my thoughts on the breach here (some of the info may be out of date in light of the new report; I was piecing stuff toget…

I still never received any notice about it. Was employed by DoD in late 00's, so am fairly certain my info was in the batch.

My understanding is that if you submitted an SF-86 form in the last 10 to 15 years, you were affected.

Re: The OPM Data Breach [pdf]

#118

Post by Gelob »

redwards510 wrote: post #75
forrestbrazeal wrote: post #53

One of the most frustrating things about this whole fiasco is that the OPM breach finally became public in the summer of 2015, but I and many other victims weren't officially notified (or offered our measly couple years of identity protection) until December or later. At the time, I shared some of my thoughts on the breach here (some of the info may be out of date in light of the new report; I was piecing stuff toget…

I just got my postcard informing me I was affected last month. I tossed the offer of credit protection because I'm already stacking multiple "we're sorry" credit protections from other breaches. The thing that burns me though, is that the credit protection is for a limited time. The severity of this breach and they can't give us a lifetime of protection?!?

You should take it. The opm breach offers the best credit and identity theft monitoring you can get. You can actually input your emails and other information and they will notify you when it's found in online dumps, etc. They also tell you the source of the dump.

Re: The OPM Data Breach [pdf]

#119

Post by tptacek »

mtgx wrote: post #111
tptacek wrote: post #17

Earlier quoted context omitted.

It is not a technical document. It is a document that contains technical details. For instance: it contains a formal set of "findings", as in the "findings" of law and fact in a trial. Here's one of the first findings: FINDING: Slow implementation of critical security requirements such as dual factor authentication is a true case of misplaced priorities. That's not technical language. It's not even formal language. O…

That's ridiculous. The OPM data breach was the largest in the US government's history. If even that, which most of the intelligence and law enforcement officials have said is a catastrophe that won't be fixed for a generation , shouldn't be portrayed in the "worst light possible", then what should? Enough with the partisan crap. This happened on those people's watch. Regardless of which party named them as the leader…

None of this has anything to do with my argument.

Re: The OPM Data Breach [pdf]

#120

Post by tptacek »

jessaustin wrote: post #60
meepmorp wrote: post #50

Earlier quoted context omitted.

> It probably won't happen in this case because the "other" party just wants this issue to go away. Arguing in public would only draw attention. From tptacek's comment, made ~5 minutes before yours: http://democrats.oversight.house.gov/news/press-releases/cum... Why would they want to avoid discussing this?

That looks like a different thing? I.e. a "memo" prepared by "staff"? Nevertheless I'm sorry to have made a comment that seemed partisan. The Democrats and Republicans can both jump in a lake for all I care.

No, it's the response of the ranking minority member of the committee that produced the report we're all commenting on. It's right there in the title.
Post reply on HN