Live data from Hacker News

New LinkedIn Data Leak Leaves 700M Users Exposed

restoreprivacy.com

11–20 of 153 posts

Re: New LinkedIn Data Leak Leaves 700M Users Exposed

#12
post #4

Now we will see an increase in SIM swapping attacks via this data dump and tons of fraud happening here. I hope they didn't use their phone number to login to their bank, crypto exchange or other social media accounts. Using phone numbers for login should be completely discouraged.

If someone merely knowing your phone number is a security risk that really seems like a flaw that should be addressed with the phone system and not by treating the numbers like sensitive information.

Re: New LinkedIn Data Leak Leaves 700M Users Exposed

#14

The article does not explain what info beyond public profiles had been stolen. You can already google search LinkedIn making this data leak very low impact

Seems like just the phone number and email.

Yeah missed that. My LinkedIn api experience is dated, are those visible via api?

Re: New LinkedIn Data Leak Leaves 700M Users Exposed

#15
post #4

Now we will see an increase in SIM swapping attacks via this data dump and tons of fraud happening here. I hope they didn't use their phone number to login to their bank, crypto exchange or other social media accounts. Using phone numbers for login should be completely discouraged.

If someone merely knowing your phone number is a security risk that really seems like a flaw that should be addressed with the phone system and not by treating the numbers like sensitive information.

True, but whether or not it should be or not doesn't change the fact that it is the current state of the US.

And it's not really just the phone number, but the combination of personal info that allows for social engineering - without having the existing customer confirm the transfer.

Re: New LinkedIn Data Leak Leaves 700M Users Exposed

#16

But is this really a problem? LinkedIn is "advertising for yourself", presumably to get a job. With the exception of my phone number, I'm ok with the world knowing this information about me. It's the equivalent of a phone book and I'm putting myself out there and advertising myself in the hopes of getting a job.

I imagine most people do not share your attitude, me included. Especially profile sections set to private staying that way needs to be trusted.

Re: New LinkedIn Data Leak Leaves 700M Users Exposed

#19

But is this really a problem? LinkedIn is "advertising for yourself", presumably to get a job. With the exception of my phone number, I'm ok with the world knowing this information about me. It's the equivalent of a phone book and I'm putting myself out there and advertising myself in the hopes of getting a job.

I feel like the lines between a data leak and large scale scraping are getting blurred. At least in their impact for the user. Which is a bad thing as it will support the "so what" attitude that many people have toward their data.

It is a fact that all this data is already being crawled by bot nets.

If all data is leaked at once, this is similar to a large scale successful crawling of the site. At least from a user perspective.

So I get what you are saying. It sounds more dramatic than it actually is. It is still a massive leak. But from a pool that scummy businesses have been thoroughly scooping from already anyway.

Re: New LinkedIn Data Leak Leaves 700M Users Exposed

#20

But is this really a problem? LinkedIn is "advertising for yourself", presumably to get a job. With the exception of my phone number, I'm ok with the world knowing this information about me. It's the equivalent of a phone book and I'm putting myself out there and advertising myself in the hopes of getting a job.

> LinkedIn is "advertising for yourself"

Not anymore, really. For years now you can't view someone's profile without logging in.

Post reply on HN