Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Giant leak exposes data from almost all Brazilians

somagnews.com

Post reply on HN
Print view View original

121–130 of 134 posts

Re: Giant leak exposes data from almost all Brazilians

#121

Post by pabs3 »

guiambros wrote: post #119
FalconSensei wrote: post #73

Earlier quoted context omitted.

I remember seeing the news, years ago, that a guy was trying to discover were spammers were getting his email. So he created a bunch of emails for different things. Guess which email started receiving spam very quickly? Yeah, the one he used for taxes

I've been doing this for exact 20 years this week. I always use a unique address for each site (pretty easy; I just use a wildcard domain). Pretty much everything has been leaked: most retailers, software companies, all phpBB forums, wordpress blogs, Experian, Amazon (3P Sellers, not AMZN itself), Dropbox, LinkedIn. The list goes on and on. Notable exceptions: Google, Microsoft, Apple, IRS. These days is a lot harder…

A better option than a wildcard domain with spam filtering is a server where there is zero spam filtering and each unique address goes to a unique folder. Then you have much more opportunity to detect leaks to spammers.

Re: Giant leak exposes data from almost all Brazilians

#122

Post by mschuster91 »

marcosdumay wrote: post #24
hi5eyes wrote: post #7

https://www.somagnews.com/giant-leak-exposes-data-from-almos... links to the source of the snippet > According to the experts, who use artificial intelligence techniques to identify malicious links and fake news, the leaked data contains detailed information on 104 million vehicles and about 40 million companies, potentially vulnerable to 220 million people.

Thanks, finally somebody telling what data is on the leak. > Information on the more than 104 million vehicles reveals important details, such as chassis number, license plate, municipality, color, make, model, year of manufacture, engine capacity and even the type of fuel used. In the case of legal entities, the following were leaked: CNPJ, corporate name, trade name and date of foundation. Every piece of informatio…

> Every piece of information on this list is either plainly visible (for cars)

Nope, engine capacity, fuel type and year of manufacture are generally not visible on a car; the VIN is also not always publicly visible (in Europe, I don't know how the regulations are in Brazil).

What makes this database dangerous is its value for criminals in aggregated form... it's enough data to forge a car title, and assuming that there is another database that links VINs to individual people (either from the government or from a hacked bank), it now is possible to identify targets for a break-in attack.

Re: Giant leak exposes data from almost all Brazilians

#123

Post by [deleted] »

exporectomy wrote: post #103
ObscureScience wrote: post #91

Earlier quoted context omitted.

It would be pretty short-sighted to reward such an individual.

Would it? Hacking on the internet is pretty much immune to conventional systems that keep people honest, like being able to be caught and prosecuted or social norms. I think it's more useful to see hackers as like a force of nature to defend against but which it's useless to try to do any moralizing about. The more hacking that happens, the more secure computers will (hopefully) be made in defense, and the less vulne…

[deleted]

Re: Giant leak exposes data from almost all Brazilians

#124

Post by shadowprofile77 »

I would argue that if anything, in our current world of privacy and anonymity-indifferent lawyers, regulators, policy makers, corporate heads and most members of the general public, things like this and the hackers behind them perform a sort of obscene public service in a way: They make everyone at least somewhat leery about trends towards so much of our private lives falling into too many databases, especially when said data is highly personal, financial, medical or location-based (and thus especially compromising in certain contexts)

The reason why? While lawmakers, politicians and corporate heads couldn't give less of a shit about the average joe's privacy, they know that it's increasingly difficult even for them and their own families to stay private from too-pervasive, intrusive data collection, and they also now see ever more often just how near impossible it is to make said data stay secure from mass public leaks. Oops... Their own "optimization" obsessed nosiness maybe biting them back bit by bit.

It would be perversely amusing to see the head of some bullshit ad tracking firm, or bottom-feeding user data reseller, or the head of a snooping social network have their own dirty laundry leaked all over the web for all to see.

Re: Giant leak exposes data from almost all Brazilians

#125

Post by rutthenut »

Clewza313 wrote: post #115
jbotz wrote: post #40

The Brazilian blog "Tecnoblog" has the full details here[1], with a list of all the information allegedly included in this data. If they are correct that's pretty much everything about everybody... I mean personal info (like addresses and phones, family, education, employer), financial info (like bank accounts, salary, credit score, creditors, bounced checks, whether receiving government assistance), other background…

Looks like it's Experian -- again. https://www.serasaexperian.com.br/ https://en.wikipedia.org/wiki/Experian#2015_data_breach https://en.wikipedia.org/wiki/Experian#2020_data_breach

They've certainly failed on a number of occasions.

Given the type of data they hold, you would expect they get targeted a lot more. Which is why they need to do better.

Much better

Re: Giant leak exposes data from almost all Brazilians

#126

Post by rutthenut »

mschuster91 wrote: post #122
marcosdumay wrote: post #24

Earlier quoted context omitted.

Thanks, finally somebody telling what data is on the leak. > Information on the more than 104 million vehicles reveals important details, such as chassis number, license plate, municipality, color, make, model, year of manufacture, engine capacity and even the type of fuel used. In the case of legal entities, the following were leaked: CNPJ, corporate name, trade name and date of foundation. Every piece of informatio…

> Every piece of information on this list is either plainly visible (for cars) Nope, engine capacity, fuel type and year of manufacture are generally not visible on a car; the VIN is also not always publicly visible (in Europe, I don't know how the regulations are in Brazil). What makes this database dangerous is its value for criminals in aggregated form... it's enough data to forge a car title, and assuming that th…

> the VIN is also not always publicly visible (in Europe

VIN is visible in the windscreen on cars. In UK at least,

Re: Giant leak exposes data from almost all Brazilians

#127

Post by dredmorbius »

closeparen wrote: post #112
reaperducer wrote: post #31

Earlier quoted context omitted.

I treat my face, name, birthday and numbers as open data. So because you don't value privacy and choose not to control you personal data, nobody else deserves privacy or to control their personal data?

I don’t believe that the phone book was an immoral institution, no. Or the county register of deeds, or the vital statistics office, or the school directory, or the voter registration rolls, or the court records. Privacy is important, there are things that must be kept confidential, but the basic facts of a person’s existence are not necessarily among them.

Phone directories permitted opting out (unlisted numbers), as well as obscured address or name.

Re: Giant leak exposes data from almost all Brazilians

#129

Post by GoblinSlayer »

Clewza313 wrote: post #115
jbotz wrote: post #40

The Brazilian blog "Tecnoblog" has the full details here[1], with a list of all the information allegedly included in this data. If they are correct that's pretty much everything about everybody... I mean personal info (like addresses and phones, family, education, employer), financial info (like bank accounts, salary, credit score, creditors, bounced checks, whether receiving government assistance), other background…

Looks like it's Experian -- again. https://www.serasaexperian.com.br/ https://en.wikipedia.org/wiki/Experian#2015_data_breach https://en.wikipedia.org/wiki/Experian#2020_data_breach

> It is one of the "Big Three" credit-reporting agencies, alongside TransUnion and Equifax.

It's an Equifax buddy.

Re: Giant leak exposes data from almost all Brazilians

#130

Post by GoblinSlayer »

agumonkey wrote: post #113
pelasaco wrote: post #54

I don't see how it can be new. When I lived some years in Brazil (around 1999-2001), and you could buy at a specific street in Sao Paulo, a CD with all the taxes information from every brazilian citizen.

What's the idea behind selling this out in the clear ?

Money.
Post reply on HN