Earlier quoted context omitted.
Binance CEO confirmed this version: https://twitter.com/cz_binance/status/1543905416748359680
Starting today, this will be known as "Shanghai'd credentials" and be reason #1 why we use ephemeral credentials (e.g. AWS STS/SSO) rather than static credentials (e.g. IAM Users)
Billion-record stolen Chinese database for sale on breach forum
211–220 of 258 posts
Re: Billion-record stolen Chinese database for sale on breach forum
#212Related: Hacker claims they stole police data on a billion Chinese citizens - https://news.ycombinator.com/item?id=31984663 - July 2022 (1 comment) Hacker claims to have obtained data on 1B Chinese citizens - https://news.ycombinator.com/item?id=31980101 - July 2022 (1 comment) Hacker claims to have stolen 1 bln records of Chinese citizens from police - https://news.ycombinator.com/item?id=31977354 - July 2022 (1 com…
This title is not exactly correct, yes the data involves lots of police reports, but it may come from a thirdparty, as Chinese police would often outsource data analysis job
Re: Billion-record stolen Chinese database for sale on breach forum
#213Earlier quoted context omitted.
Starting today, this will be known as "Shanghai'd credentials" and be reason #1 why we use ephemeral credentials (e.g. AWS STS/SSO) rather than static credentials (e.g. IAM Users)
Speaking as an Asian American, no, let's not do that.
Re: Billion-record stolen Chinese database for sale on breach forum
#214Earlier quoted context omitted.
>many on reddit/twitter/fediverse have already started to explore the data set for gender ratio, age composition and frequency of raping cases, etc. Any links?
Plenty of Chinese ones in subs like /r/China_irl etc., not seeing much traction of this story/dataset in Western world, though (hell, even on HN it barely got any upvotes 2 days ago.)
Re: Billion-record stolen Chinese database for sale on breach forum
#215Earlier quoted context omitted.
It doesn't help that so many tools are like "give me your secret key in plain text in the config file" without at least offering a link to a webpage on the github of how you could secure your keys and use this software
hardcoded creds in example documentation... T_T Use vault, env vars, GitHub/GitLab secrets, anything but string literals!!!
Re: Billion-record stolen Chinese database for sale on breach forum
#216Someone/some team in the police department is probably in serious panic right now. Not only because the data is leaked, but also because the leak has displayed an example of what they are actually recording.
For example, according to the posts that other people has posted online (probably rumor and speculations), the `address_merge_with_mobile_data.json` file is a collection of external data submitted to the police database. In the file, there are data source types such as:
- shga_dwd.base_shangyun_lhrytbxx_df
- shga_dwd.base_wahlw_base_teladsllibrarytab_df
- shga_wa.ods_nb_tab_goods
- shga_wa.ods_nb_app_icpoof_expressdelivery
- shga_wa.ods_nb_app_icpoof_delivery
- shga_wa.ods_nb_app_icpoof_expressdelivery
- shga_wa.ods_nb_app_icpoof_foodorder
That's a lot of data that are not directly related to census, social safety, or law enforcement.I guess if you're ordering food online in China, probably need to give yourself a nice nickname first instead of just using your real name then.
Re: Billion-record stolen Chinese database for sale on breach forum
#217What do we do now? It seems the majority of people on the planet now have had some of their data leaked. Or are becoming ever more entangled with government and corporate systems which control and peddle their information as they see fit. Is it ultimately a big nothing burger, or is this some singularity we are passing through?
Stop using personal information for authentication and end the concept of “identity theft”, for starters (not sure how it works in China specifically).
Include online safety and anti-scam curriculum in lower education.
Re: Billion-record stolen Chinese database for sale on breach forum
#218> While the Shanghai government and police department have largely been silent over the leak, Someone/some team in the police department is probably in serious panic right now. Not only because the data is leaked, but also because the leak has displayed an example of what they are actually recording. For example, according to the posts that other people has posted online (probably rumor and speculations), the `addres…
Is that a … concept in China? That the police should only have data “ directly related to census, social safety, or law enforcement”?
I wonder how strange or surprising to locals this might be or maybe not be?
Re: Billion-record stolen Chinese database for sale on breach forum
#219Re: Billion-record stolen Chinese database for sale on breach forum
#220Earlier quoted context omitted.
> Well, if you look at (global) society as a dynamical system it seems to me that there are two stable basins or attractors, call them "Star Trek" and "North Korea". Nice analogy. Do you really believe, that us being on an utopian trajectory is realistic?
> Do you really believe, that us being on an utopian trajectory is realistic? Oh yes. Very much so. In fact, by many measures we have been on an utopian trajectory for several centuries. Today even our failures are the result of unimaginable power. We have to learn to wield our power with wisdom. We have all of the physical technology we need already. We can practice regenerative agriculture that increases topsoil fe…