Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Breach exposed more than one million DNA profiles on a major genealogy database

buzzfeednews.com

Post reply on HN
Print view View original

321–330 of 424 posts

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#321

Post by madaxe_again »

dwighttk wrote: post #313
ig1 wrote: post #274

Earlier quoted context omitted.

In terms of medical data the amount of leakage is somewhat limited by the nature of DNA, e.g because you get a random mix you can't conclude anything about parents, etc medical status. By far the biggest practical knock-on effect is if you match someone who's doesn't know their parentage (adoption/illegitimate children/etc) who can figure out their parentage as a result of that match. Familial DNA crime searches are…

> and many of the DNA platforms don't allow them I’m assuming that the stolen information doesn’t have this limitation.

I’m cackling at the idea of GDPR compliant data thieves. “This data is only to be used for the purposes of: anything. The data controller is: whoever.”

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#322

Post by FerretFred »

jrib wrote: post #304
Random_ernest wrote: post #244

Earlier quoted context omitted.

With likely very dire results, yes I think you should. If your mothers insurance rate goes up, since you got one of these dna tests for Christmas, she should be involved in the decision to publish this data in the first place.

In the US, Congress has passed a law that explicitly makes that specific practice illegal: https://en.m.wikipedia.org/wiki/Genetic_Information_Nondiscr... What workarounds insurance companies come up with to circumvent the spirit of the law and how well it can be enforced will be interesting.

What workarounds insurance companies come up with to ... will be interesting

If there's enough money to be made, I'm sure the Usual People will be persuaded to bend the law until it gives way.

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#323

Post by pvaldes »

runaway wrote: post #270
jakear wrote: post #263

Earlier quoted context omitted.

Your street view doesn’t contain your entire genetic record (including propensities towards disease, mental and physical, which could very easily be used to discriminate against you). So they’re not really comparable whatsoever. And what is with this “this terrible thing X will happen eventually, so why not have it happen now?” argument I keep seeing nowadays? Your argument was quite literally: “Eventually someone wi…

I'm a little confused about what exactly the point of debate is here. * Is your DNA a secret? I think the fact that you leave it everywhere means no. * Should people be allowed to aggregate that information? It literally cannot be stopped so I think the point is moot. I guess what I'm missing is any addressing of the reality of the situation. I'm guessing from the content of your reply that you think that the practic…

> Is your DNA a secret? I think the fact that you leave it everywhere means no.

There is a complicated procedure to convert this skin scales to data. Not everybody is able to do it, so if is not a secret, neither is exactly open data.

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#324

Post by ig1 »

dwighttk wrote: post #313
ig1 wrote: post #274

Earlier quoted context omitted.

In terms of medical data the amount of leakage is somewhat limited by the nature of DNA, e.g because you get a random mix you can't conclude anything about parents, etc medical status. By far the biggest practical knock-on effect is if you match someone who's doesn't know their parentage (adoption/illegitimate children/etc) who can figure out their parentage as a result of that match. Familial DNA crime searches are…

> and many of the DNA platforms don't allow them I’m assuming that the stolen information doesn’t have this limitation.

Most law enforcement typically use a handful of commercial agencies (like Parabon NanoLabs, etc) for these kind of searches, it seems highly unlikely that any of them would risk using illegally obtained data because it would put their entire business at risk.

(obviously if your threat model includes intelligence agencies, etc. then your calculus might be different)

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#326

Post by ig1 »

haihaibye wrote: post #287
ig1 wrote: post #274

Earlier quoted context omitted.

In terms of medical data the amount of leakage is somewhat limited by the nature of DNA, e.g because you get a random mix you can't conclude anything about parents, etc medical status. By far the biggest practical knock-on effect is if you match someone who's doesn't know their parentage (adoption/illegitimate children/etc) who can figure out their parentage as a result of that match. Familial DNA crime searches are…

If a child has 2 copies of a variant you know both parents have at least 1 copy. You know what parent a male's X and Y came from. You can use phasing and linkage to reconstruct parental haplotypes.

Yes, but there's generally not much medical data you can infer from those.

You're right that you could reconstruct parental haplotypes, but that reveals a fairly limited amount of data, typically you'll share haplotypes with many millions of people.

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#327

Post by eddyg »

kilo_bravo_3 wrote: post #109
slg wrote: post #27

Can someone explain the potential short to medium term fears of one's DNA leaking? My initial assumption is that it would be less of a problem compared to nearly any other personal data leaking. Like it certainly sounds creepy, but credit card or other financial data being stolen presents a huge headache and creates a lot of work. I understand that in specific instances, for example when paternity is in question or i…

Nothing. Absolutely nothing. The DNA records aren't the type that can be used to clone you, or frame you with some kind of non-existent DNA copying machine. They are autosomal records. (or similar genealogical, or non-medical, types) The people spinning fantastic fairytales about how the jackbooted thug of big brother is going to crush your throat probably don't even know what autosomal means and no amount of eductio…

Sorry you're being downvoted for raising excellent points.

Watching The Genetic Detective[0] series has really shown what a great resource a searchable DNA database can be for people like CeCe in helping to solve violent crimes... even when they have been "cold cases" for so long.

[0] https://abc.com/shows/the-genetic-detective

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#328

Post by cblconfederate »

loughnane wrote: post #3

This is why I’ve been putting off getting my genome sequenced. One breach and it’s out there forever. I’ve heard good things about nebula[0] as a way to get an anonymous genome but have yet to be motivated enough to take the plunge [0] https://nebula.org/whole-genome-sequencing/

If you were putting off 23andme in 2009 you would miss out on their health reports (they have banned since).

If you were putting off whole genome sequencing last year, it will be banned by next year.

I m afraid it works the opposite: early adopters take risks and reap some rewards , late adopters are being played by regulators, spying govts and scammers.

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#329

Post by mberger »

ig1 wrote: post #326
haihaibye wrote: post #287

Earlier quoted context omitted.

If a child has 2 copies of a variant you know both parents have at least 1 copy. You know what parent a male's X and Y came from. You can use phasing and linkage to reconstruct parental haplotypes.

Yes, but there's generally not much medical data you can infer from those. You're right that you could reconstruct parental haplotypes, but that reveals a fairly limited amount of data, typically you'll share haplotypes with many millions of people.

Yes, but there's generally not much medical data you can infer from those.

Not yet.

Re: Breach exposed more than one million DNA profiles on a major genealogy database

#330

Post by stepstop »

ig1 wrote: post #274
jacquesm wrote: post #199

And half the DNA of all of the siblings and parents of the people that submitted their DNA, a quarter of their grandparents and grandchildren and so on. That's what I really hate about these companies, they get people to submit their DNA and the customers do not realize it isn't a decision that affects just them.

In terms of medical data the amount of leakage is somewhat limited by the nature of DNA, e.g because you get a random mix you can't conclude anything about parents, etc medical status. By far the biggest practical knock-on effect is if you match someone who's doesn't know their parentage (adoption/illegitimate children/etc) who can figure out their parentage as a result of that match. Familial DNA crime searches are…

It’s not only medical data that’s of concern, but also nation states Could try to use the data to identify embedded foreign agents/spies implanted in their country. Those are the ones without diplomatic cover
Post reply on HN