Live data from Hacker News

Online Cheating Site AshleyMadison Hacked

krebsonsecurity.com

191–200 of 374 posts

Re: Online Cheating Site AshleyMadison Hacked

#191

If you're going to cheat, expect to be caught. If your search for sex involves putting any personal information online, definitely expect to be caught. If you don't want to be caught, be careful, use pseudonyms, and protect yourself from tracking. Or just ask for a divorce.

There is a third option which is don't cheat. I've never done it but my last long term relationship ended with her doing it, things hadn't been good for a while. Ironically a year out I think her cheating made things easier for me (knowing there was zero way back makes a clean break simpler). I'd never cheat on anyone, I'd end things first no matter the circumstances.

The person you are responding to explicitly said:

>If you're going to cheat

Given that you are going to cheat, no, "don't cheat" is not an option.

Re: Online Cheating Site AshleyMadison Hacked

#192
post #7

Earlier quoted context omitted.

You don't always need the CVV. A lot of processors will be fine with card number, expiry, zipcode, and the street number of your address. Sometimes I try giving wrong information to see what will happen. Usually, it works.

Stripe makes CVV collection optional, for sure.

PayPal Website Payments Pro lets you opt out of address verification at least (can't remember if CVV is an option as well but I think so)

Re: Online Cheating Site AshleyMadison Hacked

#193

People get hacked all the time but the data these folks failed to defend is almost as bad as what the Feds lost. You can always repair your credit, get new cards, even replace your money but you can never ever get back your reputation or your family or the respect of others if you lose that. But giving such a site this type of information (even if you were only curious) is just asking for it to become public. The con…

I think we've learned over the years that perfection is an unrealistic goal when it comes to data security. We should still strive for better and better methods of securing data, but I think we should also try to change our expectations. When putting any information on the internet, it should be assumed that there is a decent risk of that information being discovered (regardless of security measures involved). We need to plan accordingly.

In this case, if discovery and release of the data would be something you don't think you could recover from, I think that is a good indication that maybe the data is associated with something that isn't worth doing.

Re: Online Cheating Site AshleyMadison Hacked

#194

It get's me that so many people are basically saying it serves these people right for using the service. I don't think that it matters that this is a "cheating" site, your privacy should still be guarded and it's not fair that all these people are being exposed. Secondly, I'd wager that many of the users sign up to use Ashley Madison for the thrill of the idea and probably aren't actually cheaters themselves or hooki…

Lots of people who use the site may be "innocent" (because they didn't actually do anything, or because they're in an open marriage or whatever). And even people who are to one degree or other "guilty" are not as a class to be declared guilty and given all the same punishment. That said, while I can't necessarily judge any given user of the site, I'm pretty confident that the people running the site are contributing…

Liberalism is an idea that has a lot of weight on this site.

For some, it's libertarian kind of liberalism where people should be left to make their won economic decisions. For others its the social liberalism kind where people should be allowed to decide for themselves what is a valid marriage, or what drugs they will or won't put in their bodies.

Most flavors of liberalism have at their heart the idea that "The State" is neither competent nor qualified to intervene in everything or make all decisions on behalf of its citizens. The State is usually the belligerent, but you could equally say "society" or a body like a twitter mob or a hacker group.

We don't need to collectively decide whether or not this site should exist. People should make their own choices.

There are a lot of things I think people shouldn't do and other people that help them do that. I don't think people should join churches. But, the only way I want to see churches close down is when people no longer choose to be members.

This is a freedom issue, like speech. You don't look inside to make your judgement. There is a right and a wrong here. The wrong is not the site.

Re: Online Cheating Site AshleyMadison Hacked

#195

It get's me that so many people are basically saying it serves these people right for using the service. I don't think that it matters that this is a "cheating" site, your privacy should still be guarded and it's not fair that all these people are being exposed. Secondly, I'd wager that many of the users sign up to use Ashley Madison for the thrill of the idea and probably aren't actually cheaters themselves or hooki…

I'd be willing to bet that a lot of people saying that are insecure about their own relationships.

Re: Online Cheating Site AshleyMadison Hacked

#196

Earlier quoted context omitted.

Lots of people who use the site may be "innocent" (because they didn't actually do anything, or because they're in an open marriage or whatever). And even people who are to one degree or other "guilty" are not as a class to be declared guilty and given all the same punishment. That said, while I can't necessarily judge any given user of the site, I'm pretty confident that the people running the site are contributing…

Having a global objective of reducing suffering sounds great, in theory. Solving the problem of obtaining clean water in drought stricken areas with new technology is a great example of something 'we' can do to help reduce suffering. It remains that people still have to chose to drink water from a newfangled device. Deciding a service people chose to use is causing increased suffering is a great example of something…

What is the line you draw between a service dedicated to enabling affairs, and a service dedicated to enabling, say, emotional spousal abuse? Or physical spousal abuse? Because, those people chose that path for themselves and their partners chose the path to be with someone who made those choices, right?

I'm pretty libertarian. I'll basically stand by the right of anyone to do something that makes themselves desperately unhappy because they're adults and can make their own choices. I don't think it should be illegal to cheat on your spouse, and if people want to marry people who are clearly making them unhappy -- even hurting them -- then the most I'll do is strongly suggest they reconsider their choices.

But it's a whole different matter to set up a service dedicated to profiting from enabling behavior that's making other people miserable. That's shitty. It shouldn't be illegal, its users should still have privacy, but I'll shed no tears if the proprietors of said service get forced to shut it down.

Re: Online Cheating Site AshleyMadison Hacked

#197
post #171

Earlier quoted context omitted.

Typical. Free speech! (Until I hear something I don't like!) Equal rights! (Except for people that are not like me!)

I don't think this argument really applies. It would be one thing if the site was devoted to assisting "open relationships," but it isn't. It is specifically a service to assist people in "cheating" on their partners (with the assumption being that the partners don't know and wouldn't approve). So, because of this specific detail, I don't think the "people not like me should be treated equally!" argument applies. The…

Judging other people's relationships is a losing game, no matter how objectively you label qualifiers. Few things are more opaque than the unspoken space between other minds, with their unique mix of shared + independent history, context, hopes, doubts, violence, love.

But hey, good luck drawing lines where you choose.

Re: Online Cheating Site AshleyMadison Hacked

#198
post #144

Earlier quoted context omitted.

What about people who are single and using the site? People can easily lie to their significant other and cheat on them, people can also just as easily join the site without actually cheating on anyone. Also what about the people who are in a relationship and they enjoy finding other people to perform sexual acts with? They may be on the site looking for someone else but not necessarily to cheat. There are still inno…

If you're single, why would you go there instead of a regular dating site.

Because you're more likely to have sex on the first date, since that's what most of the people on there are looking to do.

Re: Online Cheating Site AshleyMadison Hacked

#199

Earlier quoted context omitted.

How is full name, address, credit card information, and private pictures and messages considered "just metadata"? Nothing about that is metadata.

He's making a joke about the NSA

I know that's what he's trying to do but the comparison isn't really accurate so his sardonic attempt at commentary falls on its face a bit.

Re: Online Cheating Site AshleyMadison Hacked

#200

People get hacked all the time but the data these folks failed to defend is almost as bad as what the Feds lost. You can always repair your credit, get new cards, even replace your money but you can never ever get back your reputation or your family or the respect of others if you lose that. But giving such a site this type of information (even if you were only curious) is just asking for it to become public. The con…

This is insane, you're saying Ashley Madison should be prosecuted for having their data hacked? Do you have any idea what that means for the rest of the world's websites? And to even make a claim that this is somehow worse than the massively private information the Feds lost is laughable.

Do you know what data AM had on its users? Do you think it's even remotely close to the data the Feds had on every single public sector employee in the US? Should the US be prosecuted for losing that data? Should I be prosecuted because my site got hacked through a 0-day?

Should KVM be sued for a bug that allowed for that hack? Should Linode since they're the data center?

No, no one should be sued. If you want people to wake up about their private information, then prosecuting the sites is in no way going to achieve that. How about people themselves are the ones in the wrong for cheating, and not a website that makes it easier. This is akin to blaming and banning alcohol because someone drove drunk.

Post reply on HN