51–60 of 424 posts
Basically all of the features of 23AndMe/Ancestry/etc, but done offline. You’re given an app to download online, provided all of the hardware needed to spit in a tube, and get the same results.
No data stored on a cloud server, and no centralized database of everyone’s DNA. That’s probably where the real business model is though.
As someone who works in cybersecurity, it's always hard for me to interpret PR language like "orchestrated through a sophisticated attack". This could be aimed towards non-savvy readers meaning basically anything or it could be accurate and describe a nation-state (although I don't get the feeling of a sophisticated nation-state actor here). The DoJ used similar wording when prosecuting Aaron Schwartz for using Pytho…
I’ve always wondered if this were a worthy business proposition, cause I would definitely buy a product like this: Basically all of the features of 23AndMe/Ancestry/etc, but done offline. You’re given an app to download online, provided all of the hardware needed to spit in a tube, and get the same results. No data stored on a cloud server, and no centralized database of everyone’s DNA. That’s probably where the real…
As someone who works in cybersecurity, it's always hard for me to interpret PR language like "orchestrated through a sophisticated attack". This could be aimed towards non-savvy readers meaning basically anything or it could be accurate and describe a nation-state (although I don't get the feeling of a sophisticated nation-state actor here). The DoJ used similar wording when prosecuting Aaron Schwartz for using Pytho…
Often, security bulletins will use the word sophisticated when describing multi-step attacks.
Step 2: Type in stolen password
Step 3: Click log in button
Step 4: ( •_• ) ( •_• )>⌐■-■ ( ⌐■_■)
Step 5: I'm in
One example of a "sophisticated" attack
I’ve always wondered if this were a worthy business proposition, cause I would definitely buy a product like this: Basically all of the features of 23AndMe/Ancestry/etc, but done offline. You’re given an app to download online, provided all of the hardware needed to spit in a tube, and get the same results. No data stored on a cloud server, and no centralized database of everyone’s DNA. That’s probably where the real…
I think you're missing the part where you have to send the tube to a lab to do the actual sequencing. At that point they have your data, and even if there were to be a provider that says they don't keep it, that's about as credible as all the VPNs which "don't keep logs" where we later discover, whoops, they lied...
I presume the machines used are pretty complex.
Earlier quoted context omitted.
this presentation outlines the kind of terrible attacks that could be based on your DNA in the near future https://youtu.be/HKQDSgBHPfY tldr, CRISPR allows targeting bioweapons at specific individuals.
Thanks for the link to that video. I don't have the time to watch it now, but I will come back to it later. Although on the surface, specifically targeted bio-engineered weapons seems like a silly fear for most us when bullets are so cheap. If someone wants me dead, I don't think any difficulty accessing my genome is going to be what stops them.
Yeah, no one is going to go to all this trouble for some schmoe from the middle of nowhere. But imagine something like regime change as a motivation.
This is why I’ve been putting off getting my genome sequenced. One breach and it’s out there forever. I’ve heard good things about nebula[0] as a way to get an anonymous genome but have yet to be motivated enough to take the plunge [0] https://nebula.org/whole-genome-sequencing/
I am hoping that someday there will be a sequencing company that will mail me a drive containing the only copy and destroy the sample.
I'm not worried about a sophisticated attack on my individual sequence but I suspect most of these services are or will be targeted by advanced and persistent attackers.
Call me paranoid but I don't want my genome in an internet connected database (though I am very curious to see it).
As someone who works in cybersecurity, it's always hard for me to interpret PR language like "orchestrated through a sophisticated attack". This could be aimed towards non-savvy readers meaning basically anything or it could be accurate and describe a nation-state (although I don't get the feeling of a sophisticated nation-state actor here). The DoJ used similar wording when prosecuting Aaron Schwartz for using Pytho…
So they sent an email to their users that states: >We can assure you that your DNA information was not compromised, as GEDmatch does not store raw DNA files on the site. When you upload your data, the information is encoded, and the raw file deleted. This is one of the ways we protect our users’ most sensitive information. This is kind of BS right? It's encoded... not encrypted.
I would just assume that it has in fact been compromised though.