Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

abc.net.au

Post reply on HN
Print view View original

111–120 of 169 posts

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#111

Post by smaudet »

Tehnix wrote: post #106
smaudet wrote: post #94

Earlier quoted context omitted.

And then...your govt login is stolen and you are back to square one with "identity theft". National ID systems are such nonsense it is appalling there are people stupid enough to think this is a Good Thing. Easy is NOT always better. The best things in life are definitely not free.

The bar to stealing it is way different now though. You would have to steal a username + phone + PIN code for phone + PIN code for MitID app. If that happens, then it would also be trivial to unlink the app from that phone. At no point in time would you be unaware of the theft here. Contrast this to what happens in the US often: your personal info is leaked from the plethora of places it’s kept. Someone can now in pe…

"You would have to steal a username + phone + PIN code for phone + PIN code for MitID app."

And when your phone is hacked then all three are up for grabs?

"Contrast this to what happens in the US often: your personal info is leaked from the plethora of places it’s kept."

And yes, totally never is your govt info leaked from the plethora of places it is kept. /s

The problem is not having govt information, the problem is having it kept on phones or entered on devices at all.

"I’d welcome any actual arguments against it,"

See the above. I dislike the automated exfiltration of my identifying information, and then being saddled with the "responsibility" for it. The solution is not to make it even more automated, but to generally never to accept any credential except as a revokable guarantee - doing business as a large corp you should accept the risk of fraud, and presume your clientelle are not who they say they are.

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#112

Post by r00fus »

tiew9Vii wrote: post #102
tjpnz wrote: post #85

The tl;dr is that the victim was Australian and the court proceedings were heard in the US. Unless they're put before a court in Australia she's under no obligation to pay. Knowing a bit about Australian society it would not go down well if they tried. I would've used the money she spent on a US IP lawyer to sue Medibank for negligently allowing her personal information to be hacked and sold on the dark web. At the v…

She’s under no obligation to pay but I do wonder if she ever decides to take a trip to the US if she will be escorted away from the airport under police escort on landing. That’s a big worry if I was in her shoes. The next big data breach in Australia will be from the wave or realestate rental “startups”, it’s only a matter of time. The sites are badly designed which doesn’t give much faith in security. Also the larg…

> She’s under no obligation to pay but I do wonder if she ever decides to take a trip to the US if she will be escorted away from the airport under police escort on landing. That’s a big worry if I was in her shoes.

Do connecting flights in the US count? It's possible also that airlines can reroute flights to connect through the US.

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#113

Post by gorgoiler »

ryandrake wrote: post #86

"Identity Theft" shouldn't even be a thing. Someone falsifies documents and takes out a loan or something that should not have been approved. That's bank fraud and should be an issue entirely between the fraudster and the lender/bank. Somehow banks have re-named it from "bank fraud" to "identity theft," deftly shifting responsibility onto some unrelated third party, who now has to deal with it. "Your identity was sto…

The case is about whether Ms Luke was operating the PayPal account she created.

I don’t doubt her story, but if you can claim the account is yours when it suits you (“where’s my stuff?!”) is it fine to claim it’s not yours when it doesn’t (“these transactions were done by someone else!”)?

Is there a contradiction there? Perhaps not: I doubt you can use a PayPal database row to enforce a contract — you’d need an invoice or order confirmation — so neither should another party be able to use the PayPal db to convict you of fraud.

Was there other evidence against Luke?

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#114

Post by jollofricepeas »

wahnfrieden wrote: post #65
tbrownaw wrote: post #47

Earlier quoted context omitted.

> very common Are there statistics on this somewhere?

Cop oversight stats largely don’t exist because it would challenge their authority

I disagree that oversight stats don’t exist.

I would start with the number of civil cases brought against police officers that are thrown out due to qualified immunity.

https://eji.org/issues/qualified-immunity/

https://www.naacpldf.org/qualified-immunity-myths-and-danger...

Or number of police departments with civilian oversight boards though many of these are proven to be ineffective.

https://portal.cops.usdoj.gov/resourcecenter/ric/Publication...

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#115

Post by bunnie »

Looking at the court documents, it seems shady organizations registered a bunch of domain names that are used in the trade of brand-name athletic gear. The victim's identity was used to register one of those domain names, but just looking at the other registrations it's pretty clear the organizations are based out of China. In this context, the case brought by the brand owners is a little more reasonable -- if they did not try to defend their brands against this level of counterfeiting, then, they can be found to have lacked diligence in defending their trademarks.

However, in the case of the victim, her owing $1.2mm in penalties hinges on her identity being used as the owner of some domain names that contain these brands' names.

I suppose if the victim had "infinite resources" the next step as the victim would be to file a lawsuit against the domain name registrars for claiming she owned the sites. If the registrar would remove her stolen identity from the site then the suit would have no basis to link her to the domain names and she would be cleared.

But then again, what incentive would a domain name registrar have to remove your stolen ID as the owner? If they simply agreed to do it when asked, then anyone could send a fake letter to the registrar claiming you don't own your DNS records and remove you as the owner of them.

Genuine question to HN readers -- if you woke up tomorrow and found a whois entry that had your name and details listed as owner for a site that traded in illicit goods and/or morally objectionable content, how would one go about correcting that?

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#116

Post by Tao3300 »

oofoe wrote: post #57
nmfisher wrote: post #22

Earlier quoted context omitted.

Some countries/jurisdictions do exactly that, and trust me, it's a massive pain in the ass. Would you really want to visit a notary just to set up an eBay account? Because that's what you're proposing. The existing system isn't foolproof but, by and large, it works perfectly well. If the transactions in TFA truly were fraudulent, no court is going to hold her liable. The bigger problem here is a US court being happy…

Well, acktually... I just tried to set up an eBay account to buy an exhaust part. I created the account, sent the seller a message and twenty minutes later, I got a notification from eBay that I (and anyone from my household) was permanently banned because I was a "threat to the eBay community". I haven't been on eBay for ages, and as far as I know, was certainly never threatening to anyone on or off eBay. Nobody at…

> an exhaust part

Was it a catalytic converter?

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#117

Post by Tao3300 »

mvdtnz wrote: post #3

This is absurd. This is just as much as indictment of ridiculous American courts as it is the corporations prosecuting such a case. What is happening in that clown country that a civil case against a person who wasn't even involved in the infraction can be judged liable when they are not even present to defend themselves? America is a bully nation.

> What is happening in that clown country

Apparently a Trump-appointed judge in Miami is what is happening. Out of our hands unfortunately.

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#118

Post by stevenwoo »

gruez wrote: post #99
stevenwoo wrote: post #90

Earlier quoted context omitted.

There have been a series of US Supreme Court decisions that allow local law enforcement and prosecutors to a.) not have to reveal any statistics on crime and race b.) enormous discretion on powers to stop and arrest such that law enforcement can give conflicting reasons for each action, i.e. this person was suspicious because they were driving too fast, this person was driving too closely to speed limit and every var…

None of that tells us anything about whether something is "very common". In fact, as I mentioned in another comment, "very common" isn't even defined and is purely subjective. If there was some medical condition that affects 1000 people in the entire country, I doubt many would call it "very common". The same applies for most other things. A collectible where only 1000 exists in the entire country wouldn't exactly be…

You said it's a conspiracy because it can't be proven, the Supreme Court made it impossible to prove racial discrimination by law enforcement/prosecution but said it's not OK to do it, with a wink wink. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5614457/ African Americans make up roughly ten percent of the US population, but are incarcerated at a much higher rate for drug related offenses. Two simple possibilities occur to me - African Americans somehow commit drug crimes at an astronomical rate compared to others (which I really doubt based on the people I know who sold drugs in college), or police simply enforce the laws against drugs primarily against African Americans.

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#119

Post by notduncansmith »

gruez wrote: post #99
stevenwoo wrote: post #90

Earlier quoted context omitted.

There have been a series of US Supreme Court decisions that allow local law enforcement and prosecutors to a.) not have to reveal any statistics on crime and race b.) enormous discretion on powers to stop and arrest such that law enforcement can give conflicting reasons for each action, i.e. this person was suspicious because they were driving too fast, this person was driving too closely to speed limit and every var…

None of that tells us anything about whether something is "very common". In fact, as I mentioned in another comment, "very common" isn't even defined and is purely subjective. If there was some medical condition that affects 1000 people in the entire country, I doubt many would call it "very common". The same applies for most other things. A collectible where only 1000 exists in the entire country wouldn't exactly be…

I think something that happens between 2 and 3 times per day is “very common” in a colloquial sense. I drive a car with less frequency and I’d call it a “very common” occurrence.

Re: Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts

#120

Post by royroyroys »

r00fus wrote: post #112
tiew9Vii wrote: post #102

Earlier quoted context omitted.

She’s under no obligation to pay but I do wonder if she ever decides to take a trip to the US if she will be escorted away from the airport under police escort on landing. That’s a big worry if I was in her shoes. The next big data breach in Australia will be from the wave or realestate rental “startups”, it’s only a matter of time. The sites are badly designed which doesn’t give much faith in security. Also the larg…

> She’s under no obligation to pay but I do wonder if she ever decides to take a trip to the US if she will be escorted away from the airport under police escort on landing. That’s a big worry if I was in her shoes. Do connecting flights in the US count? It's possible also that airlines can reroute flights to connect through the US.

There are no international terminals in the US so you will need to enter the US if flying via the US.
Post reply on HN