Live data from Hacker News

Covid Test Data Breach: 1.3M Patient Records Exposed Online

vpnmentor.com

91–100 of 143 posts

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#91

Earlier quoted context omitted.

That doesn't do much to protect you against a website storing government mandated passport information. The only protection there would be if authorities stop demanding that everyone takes copies of personal IDs.

Yeah, when did that become acceptable?! I've had a bunch of sites request a photo or scan of my state-issued driver's license, like that's just OK to ask people to send to them.

When courts started requiring it.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#92

Earlier quoted context omitted.

That doesn't do much to protect you against a website storing government mandated passport information. The only protection there would be if authorities stop demanding that everyone takes copies of personal IDs.

Yeah, when did that become acceptable?! I've had a bunch of sites request a photo or scan of my state-issued driver's license, like that's just OK to ask people to send to them.

Banks KYC practices normalized this.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#93
post #41

Earlier quoted context omitted.

Probably getting downvoted because somehow this is still a politicized issue :/

There is a certain strain of discourse that goes "what? me politics?", getting upset when their obviously politically charged just-asking-questions narrative is called out as such. Concerning at best, antisocial at worst.

Everything is politics to someone. Him asking "Why are you downvoted" got flagged, how crazy is that?

Getting personal info leaked because one was coerced into taking a test is a completely valid discussion, without getting offended. This is the final days of civilization we're seeing, the idiocracy is here and there's no turning back.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#94

During the height of COVID, I was exploring the API design of the top-selling COVID tests on Amazon. Several had wildly unsecured APIs—sequential patient IDs but the results endpoint assumed knowing the “secret” patient ID counted as auth. Or just completely open GraphQL implementations, no different than a password-less db… For anyone considering DIYing a diagnostics program, don’t. But I’m biased (I’m the founder o…

[flagged]

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#95
post #92

Earlier quoted context omitted.

Yeah, when did that become acceptable?! I've had a bunch of sites request a photo or scan of my state-issued driver's license, like that's just OK to ask people to send to them.

Banks KYC practices normalized this.

I have no problem showing ID to my local bank though. They at most photocopy it and put it in a paper file, which maybe goes into Docstar or something. I don't trust $big_tech_site to actually a) do a good job securing it and b) not just sell the information to someone anyway.

It's silly. AT&T wanted it from me to add a phone on a business account that was shipping to our physical address, which has not ever changed since the account was opened. eBay wanted it (and my SSN! and my wife's!) despite our account being a business account registered with an EIN and connected to a business bank account. Instagram/Facebook/Meta/whatever wanted it to reactivate a dormant account that talked to a still-valid email address to which I had access.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#96

Earlier quoted context omitted.

1. Consider the pandemic response an international hysteria specifically engineered by the global elite to move as much real value up the socioeconomic ladder as possible. 2. Don’t consider the Dutch to be any different. 3. Bingo. The Dutch fit into the diatribe. I don’t understand why you think this would somehow be difficult to contend with.

difficult isn't the word as opposed to "hilarious", "waste of energy", "deaf ears", "lack of focus on what can be controlled"

Easy enough to have control over never listening to the ruler’s vaccinations/lockdown/quarantine/distancing/masking demands again.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#97
Is anyone actually surprised? Everything was thrown together in a huge hurry and governments were playing fast and loose with laws and regulations.

I'm making no judgement on whether that approach was a net positive or negative here, but the writing was on the wall from day 1 with regards to data security.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#98
It seems that anyone entrusted with private information will eventually be breached. I think that there should be legislation - strong legislation - that protects our society's individuals and their information. Make it an uncomfortable and costly responsibility to collect information, store it temporarily and long-term.

Additionally, connecting devices to the internet directly or indirectly should have the same sorts of responsibilities.

Re: Covid Test Data Breach: 1.3M Patient Records Exposed Online

#99

Is anyone actually surprised? Everything was thrown together in a huge hurry and governments were playing fast and loose with laws and regulations. I'm making no judgement on whether that approach was a net positive or negative here, but the writing was on the wall from day 1 with regards to data security.

[deleted]
Post reply on HN