Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Giant leak exposes data from almost all Brazilians

somagnews.com

Post reply on HN
Print view View original

61–70 of 134 posts

Re: Giant leak exposes data from almost all Brazilians

#61

Post by Tagbert »

Swizec wrote: post #35
Natsu wrote: post #28

Earlier quoted context omitted.

This says that it leaked Brazilians' name & CPF numbers. CPF being the number that people give to every random shopkeeper to enter that tax lottery. So, it's... not exactly a big secret. To do most official-type things you have to go down to the cartório with your actual ID, not just enter the number. Heck, I've been to places where you had to use one to use the free wifi. Granted, in that particular case, it didn't…

Reminds me of the American SSN. ”This number is super secret and you must guard it with your life and never share! Oh also write it down on every semi-official form, send by paper mail, and enter into all sorts of webapps”

But SSN should not really intended to be secret. It is not designed to be a proof of identity, but so many companies have treated it that way that it gives more access than it should. If we could prevent companies from using it like a password, it would no longer be a major risk to have it exposed.

Re: Giant leak exposes data from almost all Brazilians

#62

Post by ledialated »

Swizec wrote: post #35
Natsu wrote: post #28

Earlier quoted context omitted.

This says that it leaked Brazilians' name & CPF numbers. CPF being the number that people give to every random shopkeeper to enter that tax lottery. So, it's... not exactly a big secret. To do most official-type things you have to go down to the cartório with your actual ID, not just enter the number. Heck, I've been to places where you had to use one to use the free wifi. Granted, in that particular case, it didn't…

Reminds me of the American SSN. ”This number is super secret and you must guard it with your life and never share! Oh also write it down on every semi-official form, send by paper mail, and enter into all sorts of webapps”

I love being asked to verify my SSN just to access my own information through an unknown entity that will not disclose who they are.

Re: Giant leak exposes data from almost all Brazilians

#65

Post by fmntf »

reaperducer wrote: post #33
nicoburns wrote: post #3

Earlier quoted context omitted.

It doesn't really work like that. Some humans are likely completely off grid and not on record anywhere.

Some humans are likely completely off grid and not on record anywhere. Quite a few, including a good percentage of my relatives. One is particularly good at it. Aside from the wages his employer reports to the federal government, property ownership records, and an SSN, he simply doesn't exist. His get paid each week in cash. Doesn't have a bank account or credit card. Because of his lifestyle and the type of vehicle…

Please, do not misunderstand my question as a judgment or whatever. May I ask the (approximate, country/continent) location where your relative lives?

Re: Giant leak exposes data from almost all Brazilians

#66

Post by ascorbic »

Natsu wrote: post #28
dyingkneepad wrote: post #15

> “No, we have bigger problems than that to worry about.” Pretty much that. In the "Maslow's pyramid of government-related needs", the doxxing is near the top. People are much more worried with stuff like not dying to covid, not being kidnapped, not dying in traffic, paying the dreaded Boletos (bills), etc. Internet doxxing is dwarfed by the more urgent needs. Brazilians are also sure that exactly zero things are goi…

This says that it leaked Brazilians' name & CPF numbers. CPF being the number that people give to every random shopkeeper to enter that tax lottery. So, it's... not exactly a big secret. To do most official-type things you have to go down to the cartório with your actual ID, not just enter the number. Heck, I've been to places where you had to use one to use the free wifi. Granted, in that particular case, it didn't…

The CPF is quite annoying as a tourist. Mostly there are workarounds, but it is ridiculous how many things assume you have one. Yes, fake ones usually work. It was a few years back when I visited, but the hoops I had to jump through to buy an internal flight was unbelievable. I mean, the idea that a non-resident might want to travel within the country on a budget airline right??

Re: Giant leak exposes data from almost all Brazilians

#67

Post by slig »

malandrew wrote: post #58
jbotz wrote: post #40

The Brazilian blog "Tecnoblog" has the full details here[1], with a list of all the information allegedly included in this data. If they are correct that's pretty much everything about everybody... I mean personal info (like addresses and phones, family, education, employer), financial info (like bank accounts, salary, credit score, creditors, bounced checks, whether receiving government assistance), other background…

Is there a way for someone to look up what leaked about them so they can determine how problematic this could be?

Yes. The hacker has a contact email where you can send queries using the CPF (unique for each Brazilian) of whoever you want. He'll then send you a bitcoin address for payment and send you back the info.

Re: Giant leak exposes data from almost all Brazilians

#68

Post by r00fus »

rudyfink wrote: post #17
randerson wrote: post #11

Earlier quoted context omitted.

I can just imagine the future: Instead of reading stories of Identity Theft, we'll read about people getting locked out of their identity .. like the folks today who lose their Bitcoin keys.

"Of course, you can always pay a recovery company to get your identity back. But, that's expensive--more than most people have. The company will do it on credit (if they like your prospects), but then they have title to your identity until you pay them back, which, for many, is a day that never comes. The charges, service fees, garnishments, and interest on the above just add up and up."

Where is this from?
Post reply on HN