111–120 of 321 posts
Earlier quoted context omitted.
Maybe we all shouldn’t be so QUIC to bad protocols.
Keep downvoting yourself into the deepest hole you can imagine Google.
> Troy Hunt is such a treasure. And for us web application developers, there is no excuse for not having protection against credential stuffing! While the best defense is likely two-factor, checking against Hunt's hashed password database is also very good and requires no extra work for users!
That user even listed 23andMe [2] as an example but it's from 60 days ago. This incident is referenced on the techcrunch article.
Earlier quoted context omitted.
FYI, the police is able to find criminals now by finding DNA sequences similarities with your relatives. Not saying this is good or bad, I am just saying you don't know the extent of the impact to your personal freedom when your relative's DNA is shared.
Well they can narrow it down to the family, unless it was the very DNA giver that left that DNA sample on the scene of the crime. And since 23andme (as I assume others) don't do these anonymously, there is no hope. Unless people use someone as a proxy (i.e. I-1 give my sample to a male colleague to send it as his-2, he-2 gives his sample to someone else to send it as his-3, and so on..). Police would eventually find…
I never seriously considered using 23 and me. Not because of hackers, but rather what government would do with that information. I don't want to be responsible for some random relative getting charged with a crime just because I was curious about my family tree.
If that's your only concern, you need to read up on something called "Nazis." Imagine what they would do with a database of genetic information.
Sure, now they can start hating on people who have the gene that makes Cilantro taste like soap, but a lot of genetic things are already visible so I don't see this as being fundamentally different.
How much does that have to do with their TOS update which went out on thanksgiving DAY (the most perfect time to get lost in everyone’s inboxes). The TOS update somehow tries to forbid class actions, requires you to go through an “informal” 60 day process before any legal action, and forces you into binding arbitration. Functionally you as a customer have next to no legal rights, according to 23andMe lawyers who cook…
Does this hold up in court? At least in Germany any contracts that are heavily in favor of one side will be declared void if it comes to court.
Earlier quoted context omitted.
> I can help track down distant family members who have committed crimes? Sounds like a plus. It's no longer so easy when the definition of "crime" gets expanded. Let's take this scenario: - you're a first generation Chinese immigrant in the US - a nephew of yours is in China and critical of the CCP - you decide to have your genome scanned into 23andme or whatever to determine if you are at risk of genetic illness -…
It's precious that you imagine not getting your DNA sequenced will provide any sort of shield against dystopian governments. This sort of thing looks more like a psychological crutch than an actual effective action.
It does feel at this point that any company collecting data will be hacked, it's only a matter of "when" and no "if"...
Penalties should be strong enough that sites and apps do not collect more than an email address without very good reason. Just wanting to contact me with marketing literature is not a good reason.