Attack, succeed and blackmail could become a business. "If you don't pay me X we'll report you under GDPR and you'll have to pay much more."
Knuddels: Chat platform must pay after hacker attack fine
11–20 of 125 posts
Re: Knuddels: Chat platform must pay after hacker attack fine
#12Who gets the money, after those who administer it take there cut
Re: Knuddels: Chat platform must pay after hacker attack fine
#13Full list of 5000+ websites that store their passwords in plain text: https://github.com/plaintextoffenders/plaintextoffenders/blo...
Someone should send a friendly email to each of those offenders, linking the ruling.
It's also fair to say that the next few years will be a busy time for the government agencies tasked with GDRP enforcement.
(Assuming they do it properly, which falls within the responsibility of the relevant country)
Re: Knuddels: Chat platform must pay after hacker attack fine
#14I see this is based on a Spiegel article. Can someone link to the full ruling? One thing I am curious about is how the number was derived. Regardless, even if you disagree with the scope of the law (which I do but not the intent of course), it is a very welcoming sign to see some actual enforcement happening. An under/subjectively enforced law of this size is much worse than a reasonably enforced one.
Here's the Data Protection Officer's press release (in German): https://www.baden-wuerttemberg.datenschutz.de/lfdi-baden-wue... - the relevant paragraph is towards the end. The tl;dr is that the fine is rather low because they were very cooperative and quick to follow suggestions for improvement, and have additional improvements planned. Also, they likely couldn't afford more, and the goal of GDPR fines is not only to be effective and a deterrent, but also proportionate. The DPO says that including the cost of IT security measures taken and planned, the total expense for Knuddels is a six-digit figure.
Re: Knuddels: Chat platform must pay after hacker attack fine
#15"Knuddels is safer than ever."
Corporate speak is just so funny. The bar for "safer than ever" is pretty low when your dev team hasn't heard of password hashing.
Re: Knuddels: Chat platform must pay after hacker attack fine
#16Full list of 5000+ websites that store their passwords in plain text: https://github.com/plaintextoffenders/plaintextoffenders/blo...
I've looked at many of those Tumblr posts; most of them show that the website sends you a welcome email with your password in plain text, which is bad practice, but doesn't prove that the password is stored in plain text in the database.
Re: Knuddels: Chat platform must pay after hacker attack fine
#17GDPR is not supposed to be enforced after a 2 year grace period ?
It was, and the grace period ended in may of this year
Re: Knuddels: Chat platform must pay after hacker attack fine
#18Funny to speak about security and a GDPR fine for a website that hasn't HTTPS activated...
Re: Knuddels: Chat platform must pay after hacker attack fine
#19Full list of 5000+ websites that store their passwords in plain text: https://github.com/plaintextoffenders/plaintextoffenders/blo...
Someone should send a friendly email to each of those offenders, linking the ruling. It's also fair to say that the next few years will be a busy time for the government agencies tasked with GDRP enforcement. (Assuming they do it properly, which falls within the responsibility of the relevant country)
They should, though assuming a bloated org structure and process, fixing it now is probably more expensive than the €20000 fine.
Re: Knuddels: Chat platform must pay after hacker attack fine
#20Attack, succeed and blackmail could become a business. "If you don't pay me X we'll report you under GDPR and you'll have to pay much more."
"If you don’t pay me X we’ll report you under criminal law and you’ll have to pay much more."
"If you don’t pay me X we’ll report you under environmental protection law and you’ll have to pay much more."
"If you don’t pay me X we’ll report you under labour regulations law and you’ll have to pay much more."
How would GDPR be special?