Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

One million passports leaked online

theverge.com

Post reply on HN
Print view View original

161–170 of 264 posts

Re: One million passports leaked online

#161

Post by nicbou »

jwr wrote: post #146
rkagerer wrote: post #128

I have a real problem with the pretense posed by the article that the club has no blame. They should have understood the risk they were taking on by subcontracting a vendor to collect passports, and better vetted that vendor. Obviously the service provider was completely inept, but that doesn't absolve the fools using them. I preach to my clients this sort of PII should be treated as a toxic, hazardous substance. Ide…

If these kinds of breaches were actually costly, then people would indeed treat PII as toxic. But they aren't. The media brouhaha blows over within a week or so, and things are fine again. Leaking PII should be very, very expensive, and then this idiocy would stop.

This one is a clear breach of the GDPR. If the Spanish enforcers have any teeth, there will be a hefty fine.

Re: One million passports leaked online

#162

Post by someonebaggy »

wil421 wrote: post #74
subscribed wrote: post #69

Earlier quoted context omitted.

EU is not a country and the laws covering illicit substances vary wildly between member states.

How’s that any different than the US? States determine what they can do.

Cannabis is federally illegal in the US, and the federation has its own enforcement teams that can come and get you even if your state's enforcement teams won't.

Re: One million passports leaked online

#163

Post by aand16 »

lifestyleguru wrote: post #127

Ahh so that's what they mean at the reception when they take photo of my ID and say "it's for the police". So that any police anywhere can freely download it at any time!

While visiting Italy I've had the hotel photocopy my ID. I've researched and the legal requirement for the hotel is to fill a form on the police website, nothing more. While doing the checkout I've pressed them on the reason for keeping the photocopy ("is it for identity theft? "), the duration they were going to keep the copy etc. Basic info they were bound to disclose because of GDPR _before_ the data processing, which of course never happened.

Turns out the local policemen asked verbally to make photocopies, just in case... The hotel is more afraid of the local police than of it's clients, so they just do it.

Since I was the only client who ever asked about it, and gaslighting me wasn't going to work ("everybody does it! what do you have to hide?"), they just gave me the copy to destroy.

Other places copy IDs because they're lazy and don't want to compile the required form on the spot. Not to mention ID photocopies floating around the reception desk in plain sight...

Re: One million passports leaked online

#164

Post by lifestyleguru »

mrweasel wrote: post #150
lifestyleguru wrote: post #142

Earlier quoted context omitted.

Duh, and only on iOS and Android ones, and only on their latest versions... but don't worry they have good intents I would trust them.

This is the problem with pretty much all of the EUs attempts of getting away from US infrastructure. One of the VISA/MasterCard alternative is also a bloody app, on a smartphone, with an operating system from one of two US software gigants (One of which is know to give zero fucks about privacy). If the EU wants to continue down this road, step on has to be a mobile operating system. Avoiding tying solution to people…

The second part of my comment was /s. I wish banks, institutions, and governments would fuck off from my smartphone. Best I can do for them is web browser and email, if they want to be on my smartphone then do a mobile website.

Re: One million passports leaked online

#165

Post by aand16 »

lifestyleguru wrote: post #127

Ahh so that's what they mean at the reception when they take photo of my ID and say "it's for the police". So that any police anywhere can freely download it at any time!

To be able to push back you should know the law requirements for hotels in that jurisdiction, so they can't gaslighting you with fake "it's for police" reasons.

Re: One million passports leaked online

#166

Post by sebastiennight »

subscribed wrote: post #122
wil421 wrote: post #74

Earlier quoted context omitted.

How’s that any different than the US? States determine what they can do.

Still, EU is a loose federation with some common laws and mostly common border policy. It doesn't even have common currency.

> It doesn't even have common currency.

This statement is about as accurate as saying the US doesn't have a common language, or Vatican City residents don't have a common religion.

https://en.wikipedia.org/wiki/Economic_and_Monetary_Union_of...

Re: One million passports leaked online

#167

Post by lifestyleguru »

aand16 wrote: post #163
lifestyleguru wrote: post #127

Ahh so that's what they mean at the reception when they take photo of my ID and say "it's for the police". So that any police anywhere can freely download it at any time!

While visiting Italy I've had the hotel photocopy my ID. I've researched and the legal requirement for the hotel is to fill a form on the police website, nothing more. While doing the checkout I've pressed them on the reason for keeping the photocopy ("is it for identity theft? "), the duration they were going to keep the copy etc. Basic info they were bound to disclose because of GDPR _before_ the data processing, w…

> Turns out the local policemen asked verbally to make photocopies, just in case... The hotel is more afraid of the local police than of it's clients, so they just do it.

In Italy occasionally they find mafia members hiding for years in... their home regions or even villages. They absolutely keep it "just in case" and I would trust their local police /s.

Re: One million passports leaked online

#168

Post by 6_7 »

throwaway692675 wrote: post #89

I'm aware of another batch of leaked passports, from a few years ago. A family member was booking a school tour, when he noticed the URL of the Travel CRM included an id number. Sure enough, the CRM would return all his details given only the (sequential) id number without a need for credentials: high resolution passport scan, and all the other details provided when booking an overseas trip. He notified the CRM compa…

I'm sorry, how many figures?

Re: One million passports leaked online

#169

Post by throwaway692675 »

tempfile wrote: post #159
throwaway692675 wrote: post #89

I'm aware of another batch of leaked passports, from a few years ago. A family member was booking a school tour, when he noticed the URL of the Travel CRM included an id number. Sure enough, the CRM would return all his details given only the (sequential) id number without a need for credentials: high resolution passport scan, and all the other details provided when booking an overseas trip. He notified the CRM compa…

> The family member got the sack. Isn't this classic wrongful termination?

It wasn't worth pursuing, partly because it was a part time job. A bit sad, as the company had promised to sponsor him though further study. It was the right decision, as it turned out to be less effort than a court case to get better opportunities with other companies.

Re: One million passports leaked online

#170

Post by subscribed »

sebastiennight wrote: post #166
subscribed wrote: post #122

Earlier quoted context omitted.

Still, EU is a loose federation with some common laws and mostly common border policy. It doesn't even have common currency.

> It doesn't even have common currency. This statement is about as accurate as saying the US doesn't have a common language, or Vatican City residents don't have a common religion. https://en.wikipedia.org/wiki/Economic_and_Monetary_Union_of...

Economic and monetary union is as a group of policies aimed at CONVERGING the economies. From your link.

The European Union consists of 27 countries.

25% of them did not adopt Euro as the currency.

"common" language is orthogonal here - it would be valid if you could legally use euro everywhere. You can't, it's not a currency in the quarter of the states. Sure, someone may accept it and offer you the exchange to the local currency.

Vatican City example is also not very good (to put it mildly), because Catholicism is a state religion. You're not going to be deported for being Sikh, yes, but it's akin to the Romanian not being deported form Portugal for carrying lei in his pocket.

Euro is NOT a common currency in the EU. It is by far the most popular. It is a common currency in the Eurozone countries. And these two are distinct from Europe as well.

I'd suggest you discuss your ideas with someone before posting them again.

Post reply on HN