Quora User Data Compromised • Hacker News Board

Re: Quora User Data Compromised

#161

Post by onion2k » Tue, Dec 04, 2018, 4:04 AM UTC

ryandrake wrote: post #139

giobox wrote: post #85

Earlier quoted context omitted.

If your main concern is the sheer number of username/unique password combos, pick a good password manager that works well across the devices you use. I’ve literally stopped caring about this aspect of my family’s online life thanks to 1Password. That iOS 12 added OS level integration for the service was the icing on the cake for me.

Using a password manager (which I do) is a valid coping mechanism, but does not fix the root concern: for 90% of these cases, one shouldn't even need an account. I don't want personalization. I don't want some new identity to manage. I don't want a relationship with your service. I just want to browse the goddamned web! How did we get to this point where in order to use the Internet you have to sign up for all these…

How did we get to this point where in order to use the Internet you have to sign up for all these free accounts and generate all these ridiculous username/password combinations

We stopped using sites built by amateurs in their spare time and demanded "beautiful user experiences" that we didn't pay anything for. That costs money, so people who wanted to solve that "pain" looked for business models that meant they could deliver what people want without charging directly. Hence we have an Internet driven by advertising and privacy violation.

Re: Quora User Data Compromised

#162

Post by orliesaurus » Tue, Dec 04, 2018, 4:04 AM UTC

I really started hating Quora a while back, probably 3 years ago and stopped collaborating. Most because "people" were spamming answers with marketing bs... So many answers start with "I'm Bob, CEO of MyCompany.com, I am an expert in this and that"

Most Quora users are hungry for answers and flood-request you to answer their question just because the system recommends them to do so. No matter how many times you pass, the system still keeps notifying you that "you are needed". Quora doesn't understand a no is a no.

IMHO -> There truly isn't any benefit on providing good answers on Quora, other than stroking your ego, might as well become a micro-influencer on Instagram.

Even worse most questions seem truly 1-Google search away and the answers are low-effort. Sure you do have some rare gems, and those are truly amazing to read. Alas, that's not often and spamming answers just for the sake of answering has become a reality.

Re: Quora User Data Compromised

#163

Post by z0r » Tue, Dec 04, 2018, 4:04 AM UTC

Bruce Schneier says data is a toxic asset. He's right. There should be (will be?) laws preventing collection of most data, and punitive liability when collected data is breached.

Re: Quora User Data Compromised

#164

Post by EamonnMR » Tue, Dec 04, 2018, 4:04 AM UTC

I always found Quora's demand that I make an account merely to read, like Pinterest, extremely rude. I don't think I ever gave in and made an account but I suppose I can find out now.

Re: Quora User Data Compromised

#165

Post by EamonnMR » Tue, Dec 04, 2018, 4:05 AM UTC

koolba wrote: post #129

jacquesm wrote: post #78

This is why I hate companies that force you to sign up to gain access to content. I do not want that relationship. Sooner or later those systems will be legacy and then maintaining them will be a pain. Bitrot will set in and sooner or later there will be a breach. One new development is that you used to be able to get your invoices mailed via snail mail. Then that disappeared and you got your invoices mailed via emai…

Also snail and email invoices automatically provide you with your own copy they cannnot delete. In contrast to “past 12 months viewable online”.

Past 12 months viewable until we stop getting enough ROI to maintain the portal.

Re: Quora User Data Compromised

#166

Post by red023 » Tue, Dec 04, 2018, 4:08 AM UTC

"data imported from linked networks when authorized by users" That why I never use that shit and always just make a new account. Its just putting in a email instead of pushing a button but this providers have fooled everyone in to signing in with 3rd partys for no reason other then to collect more stuff from you.

Re: Quora User Data Compromised

#167

Post by gsich » Tue, Dec 04, 2018, 4:12 AM UTC

jacquesm wrote: post #83

IshKebab wrote: post #76

Earlier quoted context omitted.

They don't mention the hash function anywhere so I'm assuming MD5.

If they don't mention it you could assume any one of the commonly used hash functions.

So MD5?

Re: Quora User Data Compromised

#168

Post by gsich » Tue, Dec 04, 2018, 4:14 AM UTC

jtmarmon wrote: post #36

guscost wrote: post #29

Earlier quoted context omitted.

Did a double take at this too, but they clarified that it means “hashed with a unique salt” later on. Not a good word choice for a summary though!

Probably written this way because this is a release for the general public. I would imagine most people expect passwords to be "encrypted" and don't know what "hashed" means, and they correctly assumed technical people will keep reading for more info

All the more incentive to inform people what hashing means.

Re: Quora User Data Compromised

#169

Post by Pristina » Tue, Dec 04, 2018, 4:14 AM UTC

jacquesm wrote: post #78

This is why I hate companies that force you to sign up to gain access to content. I do not want that relationship. Sooner or later those systems will be legacy and then maintaining them will be a pain. Bitrot will set in and sooner or later there will be a breach. One new development is that you used to be able to get your invoices mailed via snail mail. Then that disappeared and you got your invoices mailed via emai…

physical mail is hardly more secured than email. 'literally anybody' could is in front of your house and fish all the mails straight from your mailbox while you are at work.

Re: Quora User Data Compromised

#170

Post by EamonnMR » Tue, Dec 04, 2018, 4:15 AM UTC

gowld wrote: post #148

jacquesm wrote: post #78

This is why I hate companies that force you to sign up to gain access to content. I do not want that relationship. Sooner or later those systems will be legacy and then maintaining them will be a pain. Bitrot will set in and sooner or later there will be a breach. One new development is that you used to be able to get your invoices mailed via snail mail. Then that disappeared and you got your invoices mailed via emai…

Companies hate users who don't want to sign up. They do not want that relationship. So it's a win-win if you dont' sign up. Why would companies feel obligated to generate content for free? If their systems get hacked and they have your snail mail address, they get your snail mail address as well. Email doesn't change that story.

Quora does not generate content, it's users do.