Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Samsung Recent Security Incident

samsung.com

Post reply on HN
Print view View original

111–120 of 172 posts

Re: Samsung Recent Security Incident

#111

Post by jacooper »

WaitWaitWha wrote: post #55

I requested to have all my info deleted by them. Let's see how long it takes. The email for my request is towards the bottom of this page: https://www.samsung.com/us/support/securityresponsecenter/ I am aware this does not fix the problem of the already stolen data, but it might make the data collection cost/benefit analysis in favor of discarding collection all-together. Maybe. Let me dream, would you?

According to their FAQ, the delete account button removes all of your data from their services.

Re: Samsung Recent Security Incident

#112

Post by revlolz »

WaitWaitWha wrote: post #53
hijohnnylin wrote: post #45

Just got the email from Samsung saying I was part of the breach. At the end of this (extremely long and excuse-ridden) email they inform me that I'm entitled to a free credit check every year from credit reporting agencies. Can't we just fast forward to the part where they send me a $5 check for the class action settlement? They'd save a ton on legal fees.

I got the same. I find it insulting to offer a credit check. If I wanted, I would get 20 credit checks just this year. Credit checks are also (mostly) free. Everyone and their mother offers them. Why would that do me any good for checking? How does it remediate or mitigate the loss I have?

They aren't even offering one, it's worse than that. They are providing info how to use your one annual free credit check that is gov mandated. They are not offering anything other than notice.

Re: Samsung Recent Security Incident

#113

Post by nulbyte »

aliqot wrote: post #54
ethbr0 wrote: post #48

Earlier quoted context omitted.

I've got a fairly common Gmail address as my primary. I get all kinds of account sign-ups, and also home purchase paperwork and sheriff's office employment offers, from multiple states. I used to feel bad, and spent a couple years trying to get in contact and correct whoever used my email. Now? Fuck em. If you use my email, it's my account. I just deleted "my" Roku account and unsubscribed to the services attached to…

>Now? Fuck em. If you use my email, it's my account. I just deleted "my" Roku account and unsubscribed to the services attached to it (required to delete an account). >Me deleting "your" account is the least-abusive thing I could do if you sign up with my email address. This is illegal, CFAA of 1996. Them signing up with your email is a mistake, you deliberately modifying data that isn't your own because of that is i…

> This is illegal, CFAA of 1996.

I'm not sure it is. The system you are accessing is not the user's, it's the company's. The company let you in with your own email address.

Discord was horrible about this. They kept sending automated emails about someone else's account, because the user signed up with my email address. I told them it wasn't mine and they should make the user fix their email address. Instead, they asked me to confirm I wanted to delete the account. I refused, telling them it wasn't mine. This all happened in Spanish, because the user spoke Spanish, even though my inquiry was originally in English.

So clearly, not all companies care all that much who you are and will freely let you take over other people's accounts.

Re: Samsung Recent Security Incident

#114

Post by nulbyte »

dietr1ch wrote: post #36
notsapiensatall wrote: post #33

Earlier quoted context omitted.

From that privacy policy: > Information we may collect automatically includes information about >· your device, including MAC address, IP address, log information, device model, hardware model, IMEI number, serial number, subscription information, device settings, connections to other devices, mobile network operator, web browser characteristics, app usage information, sales code, access code, current software versio…

I don't even know why I got an email from them to my work email. AFAIK I've never used a samsung device at work and I have dedicated work devices.

Discount maybe? I got one to my work address because I signed up for discounts through my employer.

Re: Samsung Recent Security Incident

#115

Post by SapporoChris »

NoboruWataya wrote: post #59
AdmiralAsshat wrote: post #46

I feel stupid for ever giving Samsung this much info to begin with. But oh, they had such compelling reasons to do it. Like trading in my old phone to get a deep discount on a new one directly from Samsung, and bypassing all the carrier bullshit! Or locking down all of my devices, so that someone who steals my phone can't factory reset it without supplying my Samsung account credentials!

When I saw this thread I went and checked my inbox to see if I had received an email telling me I was caught by this breach. I haven't, but what I do have are like five emails from my carrier in the last two weeks desperately trying to get me to upgrade to the latest Samsung phone. I have a Samsung from three years ago. I don't want to upgrade or replace it until it actually breaks, as constantly upgrading phones str…

Many of the Samsung devices can be rooted. Example: https://forum.xda-developers.com/t/samsung-galaxy-s8-root-sn... The forum itself is a good place to start looking.

Re: Samsung Recent Security Incident

#116

Post by cush »

autoexec wrote: post #65
jiggawatts wrote: post #49

Just here to remind everyone that Samsung televisions take screenshots at regular intervals of what you watch and sends this to be stored with the same level of “security”.

Roku does this too. > "Roughly twice per second, a Roku TV captures video “snapshots” in 4K resolution. These snapshots are scanned through a database of content and ads, which allows the exposure to be matched to what is airing. For example, if a streamer is watching an NFL football game and sees an ad for a hard seltzer, Roku’s ACR will know that the ad has appeared on the TV being watched at that time. In this way…

This is insane. I can't even imagine being at the meeting where this was proposed

"Advertisers want to know when their ads are being viewed"

- "We could work with advertisers to have them add some metadata to the output signal, and detect that on the client"

"Nah, let's just record everything everyone watches, that way we can harvest the data and sell it to advertisers we haven't yet partnered with in the future"

- "Yes, that sounds like a perfectly reasonable thing to do and couldn't possibly have any negative consequences. That is unless consumers have a problem with it..."

"Who?"

Re: Samsung Recent Security Incident

#117

Post by cdubzzz »

autoexec wrote: post #65
jiggawatts wrote: post #49

Just here to remind everyone that Samsung televisions take screenshots at regular intervals of what you watch and sends this to be stored with the same level of “security”.

Roku does this too. > "Roughly twice per second, a Roku TV captures video “snapshots” in 4K resolution. These snapshots are scanned through a database of content and ads, which allows the exposure to be matched to what is airing. For example, if a streamer is watching an NFL football game and sees an ad for a hard seltzer, Roku’s ACR will know that the ad has appeared on the TV being watched at that time. In this way…

I wonder if this is why a roku.com domain is always at the top of the top blocked domains list on my pihole…

Re: Samsung Recent Security Incident

#118

Post by nequo »

jiggawatts wrote: post #49

Just here to remind everyone that Samsung televisions take screenshots at regular intervals of what you watch and sends this to be stored with the same level of “security”.

Thank you for the reminder! I've found this guide on how to disable that:

https://www.consumerreports.org/privacy/how-to-turn-off-smar...

Not instilling a ton of confidence.

Re: Samsung Recent Security Incident

#119

Post by jamiek88 »

derefr wrote: post #92
capableweb wrote: post #5

Earlier quoted context omitted.

> That's all you need to steal someone's identity I wish we could stop propagating the idea that it's possible to "steal someone's identity". No, you cannot take my identity from me, I am who I am, you are who you are. What you can do however, with those details, is tricking companies and committing fraud. But it should not be up to me to make sure companies are not being defrauded, the burden is on them to prevent t…

You could take someone's identity details and use them to get a death certificate made. This is very close to "stealing" your identity — in that you yourself don't have the ability to use your identity any more in any useful way, because your identity is now (legally) dead. Then again, they don't possess it after that point, either. So maybe it's more like "identity destruction" or "identity defacement."

Undeading yourself in some societies ain’t trivial either. In others it’s nigh on impossible.

India has/had a loophole that scammers use to declare someone dead and steal their property.

Re: Samsung Recent Security Incident

#120

Post by TootsMagoon »

hijohnnylin wrote: post #45

Just got the email from Samsung saying I was part of the breach. At the end of this (extremely long and excuse-ridden) email they inform me that I'm entitled to a free credit check every year from credit reporting agencies. Can't we just fast forward to the part where they send me a $5 check for the class action settlement? They'd save a ton on legal fees.

Check your privilege bro! Lawyers need to make a living too!
Post reply on HN