Live data from Hacker News

23andMe changed its terms of service to prevent hacked customers from suing

engadget.com

191–200 of 402 posts

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#191
post #163
post #21

I would have presumed that security-minded people, which includes those who work in tech, would not so easily give away their genome, and that most of 23andMe's customers are a slice of the general population. But then I read about things like WorldCoin and that people who go to startup parties jump at the chance to give away scans of their retinas and I'm befuddled. Why would anyone willingly do that?

I'm familiar with security (I keep a copy of Applied Cryptography on my shelf for "fun reading") and tech, here's a copy of my whole genome: https://my.pgp-hms.org/profile/hu80855C Note it's a full human genome, far more data than a 23&Me report. You can download the data yourself and try to find risk factors (at the time, the genetic counsellors were surprised to find that I had no credible genetic risk factors). Pl…

That's not the same risk because 23andme also has name, address, email.

One risk if you have PII+genome is that a technically sophisticated entity can determine if you've physically been in a location. Also with an extensive PII+genome database they could find your family, for example for blackmail purposes.

Another risk is that a health insurance provider could deny you based on potential health issues they find in your genome.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#194
post #117

Earlier quoted context omitted.

The same people believed crypto-currency, infinite growth, social media and many other things. At least 23andMe provided actual value, to some at least. What I find strange is that 23andMe did not automatically delete data after 30 days, or at the very least took it offline, only to be available on request. Notify people that their results are available and inform them that the data will be available for 30 days afte…

What actual value did 23andMe and similar services offer in the first place? Quenching someone's curiosity about where their ancestors are from? Do we even know how accurate it is at doing that?

I just wanted to confirm my connection to royalty because I've always felt, y'know... special

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#195
post #163
post #21

I would have presumed that security-minded people, which includes those who work in tech, would not so easily give away their genome, and that most of 23andMe's customers are a slice of the general population. But then I read about things like WorldCoin and that people who go to startup parties jump at the chance to give away scans of their retinas and I'm befuddled. Why would anyone willingly do that?

I'm familiar with security (I keep a copy of Applied Cryptography on my shelf for "fun reading") and tech, here's a copy of my whole genome: https://my.pgp-hms.org/profile/hu80855C Note it's a full human genome, far more data than a 23&Me report. You can download the data yourself and try to find risk factors (at the time, the genetic counsellors were surprised to find that I had no credible genetic risk factors). Pl…

One non-theoretical risk is that you or a relative leaves DNA on the scene of a crime you didn't commit (or?), and this makes you a suspect. This is also assuming a real identity is tied to the DNA.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#196
post #186

Earlier quoted context omitted.

Exactly. Same reason construction vehicles have "Stay back 200 feet: not responsible for broken windshields" written on the back.

At least in California, its illegal for anything to fall from a vehicle except water and bird feathers so not sure how that sign help them.

The point being that while it’s not at all enforceable there’s a non zero number of people who will think it is and not fight it

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#197
post #163

Earlier quoted context omitted.

I'm familiar with security (I keep a copy of Applied Cryptography on my shelf for "fun reading") and tech, here's a copy of my whole genome: https://my.pgp-hms.org/profile/hu80855C Note it's a full human genome, far more data than a 23&Me report. You can download the data yourself and try to find risk factors (at the time, the genetic counsellors were surprised to find that I had no credible genetic risk factors). Pl…

That's not the same risk because 23andme also has name, address, email. One risk if you have PII+genome is that a technically sophisticated entity can determine if you've physically been in a location. Also with an extensive PII+genome database they could find your family, for example for blackmail purposes. Another risk is that a health insurance provider could deny you based on potential health issues they find in…

Technically, even without PII an adversary could determine that you have been in a physical place, they just wouldn't know what to call you.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#198
post #12

Automatically opting-in customers to a more restrictive TOS is pretty suspect, especially given the timing. IANAL, but I'm pretty sure that a court would not allow that, given that the TOS was changed AFTER the breach and it's pretty clear that the company is trying to avoid legal issues after-the-fact. I would expect the court would evaluate any breach under the TOS that was in effect at the time of the breach, rath…

What if they sell their entire business to a subsidiary?

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#199
post #27
post #21

I would have presumed that security-minded people, which includes those who work in tech, would not so easily give away their genome, and that most of 23andMe's customers are a slice of the general population. But then I read about things like WorldCoin and that people who go to startup parties jump at the chance to give away scans of their retinas and I'm befuddled. Why would anyone willingly do that?

I am a security engineer. When I signed up for 23andme, I assumed with certainty that it would be hacked and all data leaked at some point. I balanced that with the value of knowing potentially important health/genetic bio markers. In the end, I valued knowing these bio markers above the privacy of my genome. The former is actionable and I can use it to optimize my health and longevity; the latter is of vague value a…

> I can use it to optimize my health and longevity

Q: Is it a HN thing to be (obsessively?) interested in health and longevity?

Dying is a natural process. Sorry.

Post reply on HN