Breach exposed more than one million DNA profiles on a major genealogy database

Post by crumpled » Thu, Jul 23, 2020, 5:29 PM UTC

slg wrote: post #202

crumpled wrote: post #182

Earlier quoted context omitted.

If the data is managed by a company that isn't in the healthcare industry, HIPPA doesn't apply. An insurance company, even a health insurance company can purchase non healthcare data from an analytics company. It wasn't HIPPA protected when it was on my heritage, and it won't be healthcare data when it's eventually leaked and resold. If you don't think legitimate companies are interested in buying that data, look aro…

I never mentioned HIPAA in the context you are implying. I was simply saying it won't protect the malicious actors from being discovered. > look around at the market for our password breach and identity theft data. There's a brisk, legal trade. If it is so easy to acquire this data legally, do you want to point to a business from which one can legally purchase "identity theft data"?

Post by jrumbut » Thu, Jul 23, 2020, 5:40 PM UTC

lukaa wrote: post #79

jrumbut wrote: post #58

Earlier quoted context omitted.

Regardless of their policies, they still want to store it themselves and put it on the Internet. I am hoping that someday there will be a sequencing company that will mail me a drive containing the only copy and destroy the sample. I'm not worried about a sophisticated attack on my individual sequence but I suspect most of these services are or will be targeted by advanced and persistent attackers. Call me paranoid b…

And you should trust that company or government based on what?

Post by jjeaff » Thu, Jul 23, 2020, 5:59 PM UTC

int_19h wrote: post #218

tzs wrote: post #151

Earlier quoted context omitted.

That leads to my afterlife nightmare scenario. I die bravely in glorious battle and am chosen by the Valkyries for Valhalla. One evening as we feast after that day's fighting, quaffing giant tankards of mead and boasting of our deeds, there comes a knock at the door. Two young men in suits enter, and go to speak to Odin. Odin then call for me to come over. He tells me that the young men are Mormons, and that some dis…

Mormon baptism for the dead is conditional - it doesn't automatically convert them, but rather the dead person gets a choice to accept that baptism or not. But then again, while in Mormon theology the spirits are immediately sorted into paradise and "spirit prison" upon death, they can apparently communicate across the boundary between the two; and those in paradise can thus evangelize to those in prison, until they…

Post by jjeaff » Thu, Jul 23, 2020, 6:07 PM UTC

int_19h wrote: post #220

Trasmatta wrote: post #113

Earlier quoted context omitted.

That's what they're trying to do. In Mormon theology everyone who dies without a chance to be baptized must be given a proxy baptism by someone living, so they have a chance to accept the gospel in the afterlife. The goal is that this will eventually happen for everyone who ever lived. (Source: former Mormon.)

Why does it require genealogical research, though? Can proxy baptism only be performed by living relatives? And if not, then wouldn't just knowing the name of the person suffice? Or, for that matter, wouldn't any way to unambiguously identify them?

Post by throwaway2048 » Thu, Jul 23, 2020, 6:30 PM UTC

dragonwriter wrote: post #357

dwighttk wrote: post #313

Earlier quoted context omitted.

> and many of the DNA platforms don't allow them I’m assuming that the stolen information doesn’t have this limitation.

> I’m assuming that the stolen information doesn’t have this limitation Stolen information has provenance problems that make it difficult to use as evidence of any crime other than theft itself in any system with even rudimentary due process protections and presumption of innocence. I mean, it's hardly as if you are going to be able to get the people who handled the data between the people who had it lawfully and the…