Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Quora User Data Compromised

blog.quora.com

Post reply on HN
Print view View original

191–200 of 525 posts

Re: Quora User Data Compromised

#191

Post by mook »

gowld wrote: post #152
10bass wrote: post #132

Earlier quoted context omitted.

It hasn't changed for either one, sadly. [1] [2] [1]: https://www.bankofamerica.com/privacy/accounts-cards/shopsaf... [2]: http://www.citibank.com/transactionservices/home/card_soluti...

virtual card #s is a great system, why did it rot? I assume it's because the whole industry prefers data-brokering your purchase history, joined on credit-card # to establish identity.

Wouldn't the bank still know your full purchase history (since they know what numbers are tied to you)? So they'd in fact get a leg up on the competition, who get a more distorted view?

Re: Quora User Data Compromised

#192

Post by King-Aaron »

I somehow got added into the Quora ecosystem some time back, without even actually signing up from memory. Just one day I'm getting notifications that someone is talking to me on Quora.

Even though I didn't explicitly set up an account, it seemed to have done it for me already. I just assumed it was one of those shitty content aggregation platforms like the sorts that steal all the posts from Stackoverflow and rebrand them.

Re: Quora User Data Compromised

#193

Post by ttty2 »

throwaway292939 wrote: post #108

I feel that this is becoming a standard narrative. SV company comes up with an idea, decides harvesting lots of user data is how they will monetize. VCs pump in a lot of money and expect their returns, so company is now forced to collect even more data aggressively (the sign-in wall that many others have pointed out is an example of this). VC pressure causes company to "innovate" fast, most likely trading off securit…

I'm still amazed to this day that people give real names to their online accounts. I'd never put my real name anywhere online. It works quite well for me and if my data is leaked, I'm still ok. Probably I should use more email accounts to don't be linked, but it's fine anyway.

Re: Quora User Data Compromised

#194

Post by mulmen »

zbentley wrote: post #182
mulmen wrote: post #52

Earlier quoted context omitted.

Well equifax didn’t harm any of their customers so their bounce back should be no surprise.

I'll bite. How did they not harm their users?

Equifax’s customers are whoever pays them for access to data. Their customers are not the people who had their personal data exposed.

The first rule of Web 2.0 is still true: if you are not paying for the product you are the product.

Re: Quora User Data Compromised

#195

Post by jedberg »

gowld wrote: post #149
jedberg wrote: post #91

Earlier quoted context omitted.

I use privacy.com and Lastpass to help with this problem. Any time there is a service I have to have a business relationship with that I don't trust to keep my info secure, I use a unique password and a unique credit card number with a tight limit. What's nice is that they tie the card to a single vendor too. For example, the water company. I know the water bill is usually $50 or less, so I set the limit to $60/mo. A…

Was the water company thankful enough to compensate you for the $X,000 consulting services you provided because they didn't set up their own security monitoring?

Given their lack of security, I’m guessing they have no idea of the value that I provided.

It’s all good though. Knowing I helped thousands of my neighbors is compensation enough. Besides, if they gave me a credit, they’d have to hike everyone’s bill to compensate!

Re: Quora User Data Compromised

#196

Post by ttty2 »

mulmen wrote: post #52
YetAnotherNick wrote: post #37

Earlier quoted context omitted.

I see no lesson to be learned from the business perspective. If equifax can recover from their data loss, any company can.

Well equifax didn’t harm any of their customers so their bounce back should be no surprise.

If they didn't, then no company will ever harm any customer.

Re: Quora User Data Compromised

#197

Post by beachy »

codezero wrote: post #180
beachy wrote: post #155

The Quora link to more details is a masterpiece of corporate obfuscation. Posing as a FAQ, it presents questions, then proceeds to not answer them (at least, as of a few minutes ago). https://help.quora.com/hc/en-us/articles/360020212652 What happened? - not answered in any detail What kind of user data was affected? - answered! How do I know if I was affected? - not answered How was it brought to your attention? - n…

All of these appear filled out now. Quora is good about responding quickly, which should be appreciated. That the FAQ wasn't fully filled out was just because it was being filled out. I know this can be an awkward experience for someone who immediately sees and responds to the tech news, but a bulk of their users won't be that profile. They got the framework for response laid out immediately, and are working on the r…

They were already filled out, but with non-answers. For example:

> When did you first learn of the issue? How was it brought to your attention?

> We first learned of the issue on November 30. Upon learning about the issue, we immediately launched a comprehensive investigation and remediation effort.

There is absolutely nothing in there about how this was brought to Quora's attention. Did they see identities for sale on the dark net? Were they approached for a ransom? Did a user inform them? Nothing.

The other questions ditto.

Re: Quora User Data Compromised

#198

Post by askafriend »

pavanlimo wrote: post #97

Clearly this is well orchestrated and professional. I'm wondering what could be the motivation for such an attack. There is no monetary benefit whatsoever. Perhaps some AI company wanting to acquire solid data to train their models?

Rumors are that it was a disgruntled ex-employee.

Re: Quora User Data Compromised

#199

Post by dreyfiz »

xfitm3 wrote: post #143
dreyfiz wrote: post #67

I'm experiencing a sense of schadenfruede because I'm embittered by Quora's arrogant "real names" policy. They won't "let me" contribute. Nothing insightful. I'm just here to kick them while they're down.

Are names validated?

Yes. Within hours of registering my account, Quora emailed to let me know that my name sounds fake and that I have to prove my identity with government ID, or I can't use Quora on an equal basis with other users. It really burns me!

I think part of their reasoning is "hey, we have prominent users! Let's make sure everyone knows it!" But Ask MetaFilter has famous users. They are in no way diminished by my pseudonymity.

Plus I know how to change my name. I can spend $100 at the courthouse, and get an ID that would force Quora to let me use my preferred name. My point is, Quora doesn't get to be the impetus for my legal name change. I don't need Quora's permission to call myself what I prefer to be called.

Re: Quora User Data Compromised

#200

Post by codezero »

beachy wrote: post #197
codezero wrote: post #180

Earlier quoted context omitted.

All of these appear filled out now. Quora is good about responding quickly, which should be appreciated. That the FAQ wasn't fully filled out was just because it was being filled out. I know this can be an awkward experience for someone who immediately sees and responds to the tech news, but a bulk of their users won't be that profile. They got the framework for response laid out immediately, and are working on the r…

They were already filled out, but with non-answers. For example: > When did you first learn of the issue? How was it brought to your attention? > We first learned of the issue on November 30. Upon learning about the issue, we immediately launched a comprehensive investigation and remediation effort. There is absolutely nothing in there about how this was brought to Quora's attention. Did they see identities for sale…

Ah OK – I read this wrong then. My bad. I am confident, or at least optimistic, they will make improvements, if not, then I'll let you know how my foot tastes.
Post reply on HN