Live data from Hacker News

OnePlus Hit by Data Breach

forums.oneplus.com

41–50 of 53 posts

Re: OnePlus Hit by Data Breach

#41
post #14

"The name, contact number, email and shipping address within certain orders may have been exposed." I really hate that most companies force me to give a phone number when I buy something. Why do they need it? Why forcing? I usually end up giving a fake one.

Delivery by courier (FedEx, Purolator, etc) often requires a "contact number" for the recipient.

Re: OnePlus Hit by Data Breach

#42

https://www.engadget.com/2017/10/11/oneplus-oxygenos-data-an... https://www.theverge.com/circuitbreaker/2017/10/11/16457954/...

The great thing about OnePlus phones is that nearly all of them have LineageOS support. I just install this over OxygenOS. Also when I installed OxygenOS, I recall it asking if I wanted to provide analytics to them in the setup process.

Re: OnePlus Hit by Data Breach

#45
post #32

Earlier quoted context omitted.

Phone numbers are not required for credit card processing. Address, yes. Phone, no.

Address is also not a requirement.

But it can be if you require. Billing address verification can be important for higher value transactions. Some sites won't ship to an address other than the billing address.

Re: OnePlus Hit by Data Breach

#46
Lessons:

1. Use pseudo name (nickname) for shipping, instead of full name

2. Use company address instead of home one whenever possible

Just think about how many people have to access your shipping data just to deliver an order to you, the online shop, the shipping company, the warehouse, the delivery guy.

It kind of hard to imagine all of them would have perfect bank-level security.

Re: OnePlus Hit by Data Breach

#47

Lessons: 1. Use pseudo name (nickname) for shipping, instead of full name 2. Use company address instead of home one whenever possible Just think about how many people have to access your shipping data just to deliver an order to you, the online shop, the shipping company, the warehouse, the delivery guy. It kind of hard to imagine all of them would have perfect bank-level security.

Most people don't treat their address as sensitive information.

Many publicly accessible government records have address information.

Re: OnePlus Hit by Data Breach

#48

Lessons: 1. Use pseudo name (nickname) for shipping, instead of full name 2. Use company address instead of home one whenever possible Just think about how many people have to access your shipping data just to deliver an order to you, the online shop, the shipping company, the warehouse, the delivery guy. It kind of hard to imagine all of them would have perfect bank-level security.

Post office boxes exist for this reason.

Re: OnePlus Hit by Data Breach

#49

Lessons: 1. Use pseudo name (nickname) for shipping, instead of full name 2. Use company address instead of home one whenever possible Just think about how many people have to access your shipping data just to deliver an order to you, the online shop, the shipping company, the warehouse, the delivery guy. It kind of hard to imagine all of them would have perfect bank-level security.

This is why I pay for a USPS box every year without batting an eyelid. They also provide a physical address for vendors that demand that, presumably because they exclusively use UPS or Fedex - works fine.

Re: OnePlus Hit by Data Breach

#50
post #20

I get that data breaches are their own class of problem, but I do find it ironic that people gave their contact/sales info to a company headquartered in Shenzen and have any expectation of data protection/privacy.

Because American companies definitely don’t sell your data.

Is this an argument? Can people be weary of companies in two countries or do they just have to pick one?
Post reply on HN