AT&T says criminals stole phone records of 'nearly all' customers in data breach

Post by [deleted] » Fri, Jul 12, 2024, 7:42 PM UTC

alistairSH wrote: post #168

ajsnigrutin wrote: post #96

Earlier quoted context omitted.

I never understood the american secrecy about SSN... it should be a "username" not a "password"... In my country you can calculate our own national id (mix of date of birth, autoincreasing number by each birth that day + 1 checksum number), and if you do/have any kind of personal business, your personal tax number has to be written everywhere, on every receipt you hand out or anything you buy as a business. Somehow k…

I never understood the american secrecy about SSN... it should be a "username" not a "password"... The problem is banks/financial services do a piss-poor job validating identity when issuing credit/opening accounts. "Oh, you provided an address, a SSN, and [non-random, easily discoverable personal fact]! Sure, here's a CC with a $150k limit!" It's not the leak that's the problem; it's the ease with which that leaked…

Post by jodrellblank » Fri, Jul 12, 2024, 7:46 PM UTC

gz5 wrote: post #319

The root cause (1) is the data store should not have been available on the underlay network. Anything connected to an underlay network is a ticking time bomb. Any servers or admins which need to talk to the data store should instead use a private overlay (2) network. Any users (likely just remote admins) should do the same. (1) Same root cause as 99% of breaches and yet it is too often swept under the rug while we fo…

Post by nashashmi » Fri, Jul 12, 2024, 7:48 PM UTC

nijave wrote: post #317

nashashmi wrote: post #182

Earlier quoted context omitted.

Not their fault. Snowflake was breached. And the data was with Snowflake.

Snowflake wasn't breached. A Snowflake database belonging to AT&T was breached.

Post by nanidin » Fri, Jul 12, 2024, 7:49 PM UTC

nequo wrote: post #321

@dang Could I ask why this topic gets systematically penalized in the HN ranking? There have been 15 submissions so far, I assume partly because previous submissions are not shown on the main page so HN users keep re-submitting it. This topic is both newsworthy and high interest. (I was going to link to the 14 other submissions but the list is too long and it'd just come across as obnoxious.)

Post by not2b » Fri, Jul 12, 2024, 7:49 PM UTC