171–180 of 315 posts
My issue with haveibeenpwned is that I don't know what's leaked. Note, I'm super happy with the fact that the service exist because I'm happy with the fact to know who of my social circle is in it, so I can notify them. But I don't know exactly what's leaked.
Are passwords leaked, for example? What about my social info is on there?
I love how the reasons to delete social media keep on growing. With someone's number you can very easily get a rough idea of where they live. I can imagine the living hell this creates for Domestic Violence survivors and others escaping bad situations. On the flipside I plan on spending my weekends phone free, only carrying a small FM radio to play music.
Wait until you learn we used to collect everyone's name and phone number and often even their address in big books that just anyone could read. You could even have them delivered to your doorstep.
Earlier quoted context omitted.
Utile the does the EU does notify them, which would be really funny tbh. Just imagine getting a SMS (chain): > You phone number and some of your data ( ) had been involved into a Facebook data breach. While Facebook is required by to inform you about this breach they insists of not complying with the law and keeping they users in the dark. As such we decided to do so. More information can be found here:
EU will not notify them, since EU doesn't have technical tools and legal framework to do it. If DPA finds Facebook in breach of GDPR they will be ordered to do it with additional fines for non complying. Art. 58 GDPR Powers point 2: > Each supervisory authority shall have all of the following corrective powers: > (e) to order the controller to communicate a personal data breach to the data subject; > (f) to impose a…
Technically it's not a problem, it's kinda easy to filter phone numbers by country and (less reliable) by carrier. Then you either can use country local SMS gateways or potentially give it to the carrier in question and let them do it.
Again the problem is the legal basis.
Preferably a change of law should:
- make it legal for the goverment to do the contacting, including by passing it to the carrier associated with the number
- require carriers to send the massage (to avoid auto matic SMS spam detection problems). Through you give them some (small!) amount of money for their (lets be honest) small amount of additional work.
I’ve said it before and I’ll say it again, unless and until, companies like Facebook are fined appropriate amounts they’ll never stop. Quite literally, every business school on the fucking planet will tell you do something if it’s cheaper. It is cheaper for them to not give a fuck, than to give one. Unless they are fined upwards of $20-50bn it’ll never stop because it’s always going to benefit their bottom line. Full…
We all know how badly that goes with speed traps and red light cameras - instead of improving, the road conditions and sometimes even local rules are tweaked to maintain steady cashflow.
Say no to revolving doors of regulators, say no to moral hazard of what effectively amounts to vice tax. Apply criminal penalties when reasonable, don't make data leaks & privacy breaches just another cost of doing business.
-edit-
Clarification: a fine works well when it's expected to be a rare penatly enacted on a singular player - as it makes that player noncompetitive in the market. Conversely, when fines are expected to apply regularly and at proportional rate to most, or all, players in a market, the fine no longer makes the player noncompetitive - it merely shifts the market. Perhaps some alternative markets (print? radio & TV?) would pick up some of the advertising slack, but largely it'd be a regular money transfer from corps to the government. And a "vice tax" like that is a clear moral hazard, with no natural end in sight.
Earlier quoted context omitted.
Clearly they technically can. It's that the GDPR doesn't allow it. Think about it... If you asked a company to delete your data, are you giving them permission to go refind that data on the dark web, cross reference it with records they should have deleted, and use it to send you email? Clearly not.
If GDPR prevents people from being notified that their data was breached, then the GDPR needs revision.
Unfortunately there's a lot a misinformation around GDPR spreading online.
I’ve said it before and I’ll say it again, unless and until, companies like Facebook are fined appropriate amounts they’ll never stop. Quite literally, every business school on the fucking planet will tell you do something if it’s cheaper. It is cheaper for them to not give a fuck, than to give one. Unless they are fined upwards of $20-50bn it’ll never stop because it’s always going to benefit their bottom line. Full…
You are advocating creating perverse incentives. A specific branch of government, a select agency, to become a profit center through continuous finding and fining of ever more wrongdoings. All morally excused because the victims are faceless multinational corps. We all know how badly that goes with speed traps and red light cameras - instead of improving, the road conditions and sometimes even local rules are tweaked…
Earlier quoted context omitted.
I can see a few (a lot) of differences between a phone book and Facebook in this analogy.
well yea, they aren't "really" the same thing. It was just phone numbers weren't considered all that private back then.¯\_(ツ)_/¯ just a hot take
Earlier quoted context omitted.
If Facebook has since deleted some of those accounts or associated phone numbers, they may no longer have a way to contact those users. The GDPR in Europe would require them to delete that data in a bunch of circumstances.
> If Facebook has since deleted some of those accounts or associated phone numbers, they may no longer have a way to contact those users That would totally defy logic. I don't think that Facebook deletes anything ever .
I’ve said it before and I’ll say it again, unless and until, companies like Facebook are fined appropriate amounts they’ll never stop. Quite literally, every business school on the fucking planet will tell you do something if it’s cheaper. It is cheaper for them to not give a fuck, than to give one. Unless they are fined upwards of $20-50bn it’ll never stop because it’s always going to benefit their bottom line. Full…
You are advocating creating perverse incentives. A specific branch of government, a select agency, to become a profit center through continuous finding and fining of ever more wrongdoings. All morally excused because the victims are faceless multinational corps. We all know how badly that goes with speed traps and red light cameras - instead of improving, the road conditions and sometimes even local rules are tweaked…
Make it a "third sector", properly audited NGO (watchdog, thinktank, foundation ...), with ties to some appropriate umbrella (UN, ICJ), that uses some sort of blockchain solution to fine as needed, and then allocate compensation from this to aggrieved parties, or social programs, compensating not only for loss of privacy, but for the other nasty effects (fake news, emotional distress, political polarization ...) that F'book is causing.-
Otherwise, our souls are just another cost of doing business to them.-