Live data from Hacker News

French government agency confirms breach as hacker offers to sell data

bleepingcomputer.com

161–168 of 168 posts

Re: French government agency confirms breach as hacker offers to sell data

#161

Earlier quoted context omitted.

I agree with the premise that SSII audits are useless, but your solution sounds like bandaid on a cancer. The real solution solution is stop this surveillance machine madness! I understand that identity is required for property deeds and bank accounts for tax reasons and that should 100% not be online. But for the rest, it should be entirely outlawed to collect personal information beyond what's necessary for the ser…

Er? social security covers more than just healthcare and the issue with on-line data in context of healthcare is patients' history, which i) is sensitive and ii) needs to be shared among health care providers.

[deleted]

Re: French government agency confirms breach as hacker offers to sell data

#163
post #157

Earlier quoted context omitted.

It's not just one head though. It's 3 different right-wing administrations (Sarkozy, Hollande, Macron) wanting to make everything digital, fighting against the unions, fighting against the users, and fighting against any common-sense administrator so they can destroy public services, close down local government service branches (La Poste, sécurité sociale, etc). It was always an entire fuck up. There was no way it wa…

> It's 3 different right-wing administrations (Sarkozy, Hollande, Macron) So now socialists are right wing? Who isn’t then? Kim Jong Un maybe?

It's hard to say otherwise. They were moderate left in the 80s when they were doing nationalizations and pro-worker reforms. They've embraced free market in the 90s which is arguably not very left-wing. Leaving aside same-sex marriage for a minute, Hollande's rule was well-known for social regressions for workers (Loi travail) and minorities (Déchéance de nationalité, taking 7 year-old children into police custody for thought crimes), and handouts for wealthy elites (CICE). That, and systematically continuing to destroy public services that Sarkozy already harmed. That can hardly be called left-wing in my book... unless you'd like to name left-wing policies introduced under Hollande?

Re: French government agency confirms breach as hacker offers to sell data

#164

Earlier quoted context omitted.

I agree with the premise that SSII audits are useless, but your solution sounds like bandaid on a cancer. The real solution solution is stop this surveillance machine madness! I understand that identity is required for property deeds and bank accounts for tax reasons and that should 100% not be online. But for the rest, it should be entirely outlawed to collect personal information beyond what's necessary for the ser…

Er? social security covers more than just healthcare and the issue with on-line data in context of healthcare is patients' history, which i) is sensitive and ii) needs to be shared among health care providers.

French context: sécurité sociale exclusively means socialized healthcare. Sorry for the confusion.

Re: French government agency confirms breach as hacker offers to sell data

#165

Earlier quoted context omitted.

It's supposed to be identifying information here. Usually, you can just send copies of those documents, which means that if you're looking to impersonate someone, you can easily produce fakes. And since everyone and their grandmother asks for these, people don't bat an eye and send them. The coup de grace of security in France is signatures, though. Now, since you can't produce a physical signature over the internet,…

Physical signature are as useless anyway. We could just mark an X and it would be exactly the same. It only proves that some anoynmous person had a pen and was not afraid to use it.

You usually register a copy of your signature when you get an ID card or a bank account, so no it’s no like an X; you’d have to actually sign like the person you’re trying to impersonate.

Re: French government agency confirms breach as hacker offers to sell data

#166
post #165

Earlier quoted context omitted.

Physical signature are as useless anyway. We could just mark an X and it would be exactly the same. It only proves that some anoynmous person had a pen and was not afraid to use it.

You usually register a copy of your signature when you get an ID card or a bank account, so no it’s no like an X; you’d have to actually sign like the person you’re trying to impersonate.

Once I had a problem in the bank because in the registration card I had a small space (.5x3cm (1/4x1 inches?)), so my real signature was different.

Re: French government agency confirms breach as hacker offers to sell data

#167
post #157

Earlier quoted context omitted.

> It's 3 different right-wing administrations (Sarkozy, Hollande, Macron) So now socialists are right wing? Who isn’t then? Kim Jong Un maybe?

It's hard to say otherwise. They were moderate left in the 80s when they were doing nationalizations and pro-worker reforms. They've embraced free market in the 90s which is arguably not very left-wing. Leaving aside same-sex marriage for a minute, Hollande's rule was well-known for social regressions for workers (Loi travail) and minorities (Déchéance de nationalité, taking 7 year-old children into police custody fo…

Hollande? Exemption for capital gains on investment property pushed from 15 to 30 years retention. Repelled sarkozys state financing tuition for French schools abroad. Many other examples that no self respecting right wing politician would promulgate. Hollande was (is) socialist.

Re: French government agency confirms breach as hacker offers to sell data

#168

Earlier quoted context omitted.

Then the headline would be French goverment loses encryption keys ..

Access to the server gives you access to the encryption keys, unless the server is just storing end-to-end encrypted material for someone else and doesn't do anything with the data.

At this point I must assume the expertise to troll exceeds that of secure systems' design.
Post reply on HN