Live data from Hacker News

23andMe changed its terms of service to prevent hacked customers from suing

engadget.com

361–370 of 402 posts

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#361

Earlier quoted context omitted.

I simply don't want to deal with spam or scams. If I'm exposing my contact details it would be a separate set that is dedicated to dealing with communication coming from the public.

Why? You can change your phone number and your name. Good luck with doing so with your DNA.

Phone numbers are an increasingly important identifier. Sucks to lose one.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#362

Earlier quoted context omitted.

This credit score system in the US always made me curious. Say some point I had a proposition to move to the US and I asked the company offering the job how they will ensure that I immediately get the best possible score. They said it was not possible because it was a personal score. I told them that I will certainly not start to build a credit score at 40 yo so they will have to find someone else.

[flagged]

When you come from a place where in order to get a credit the banks look at your finance, job etc. and based on that they give you one or not, the US system is weird to say the least.

I am glad you are happy building a credit score and then when your SS number is lost (or some other PII) you have to go through hoops to maintain it. This is a place I do not want to be in.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#363

Earlier quoted context omitted.

This credit score system in the US always made me curious. Say some point I had a proposition to move to the US and I asked the company offering the job how they will ensure that I immediately get the best possible score. They said it was not possible because it was a personal score. I told them that I will certainly not start to build a credit score at 40 yo so they will have to find someone else.

You refused a job because the company would not assist you in obtaining a perfect ("best possible") credit score? a) nobody has a perfect score b) FICO algorithms are proprietary from third-party companies, how would your potential employer have any influence?

Yes, and this is when I discovered this system which looks quite crazy to me.

I am coming from abroad with experience nedded in a US company (and therefore in the US at large) and I start my finance as if I was 18.

Then if there is a problem with my PII I have to worry about why it was lost. The company that lot it is going to give me a year of some kind of monitoring.

Well, no. I am not really interested to depend on some proprietary system that can make my life difficult just because someone fucked up. Or go through hoops to build it without consideration of my past outside the US or my job.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#364
post #343
post #317

Earlier quoted context omitted.

>legally forbidden to use such data. Great training set to check the results of other factors, then use those to infer. Moreover "legally forbidden" means jack faeces unless you can point to people who had convictions recorded and went to jail. Otherwise we're merely discussing business conditions & expenses.

I mean, of course but that’s applicable to all regulations, isn’t it? Yes, they can be violated, but what else do we have?

If you keep things secret they can't be used in a regulation breach by people who don't know those things.

We have /that/.

Theft is illegal and you lock your house, and that regulation is a serious one. The idea we have nothing but regulation is absurd in the extreme.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#365

Earlier quoted context omitted.

What if you want to run a query to compare your DNA to everyone else’s to see if you have any relatives that are registered already? Wouldn’t that need access to the entire database and essentially be a point of weakness?

I am no expert on such systems. But it seems to me that the comparisons should only be run within the cells. The caller only passes the one to compare it to, and the only thing that comes back from each cell is any matches. That way, only the specific cell has access to its data.

You might be interested in homomorphic encryption. It allows for mathematical operations on encrypted data. I don't know if any database actually supports it, but it should allow for things like SUM operations on a column of encrypted numbers with a result that is also encrypted.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#366
post #358
post #287

Earlier quoted context omitted.

I'm not too worried about it because it's never a 100% overlap. Even my brother and I share only ~50% DNA. It gets way sparser for more distant relatives. About insurance companies, they're legally forbidden to use such data.

> Even my brother and I share only ~50% DNA. This is completely false. Any two random humans have more than 99% overlap by virtue of being the same species. It's even higher for brothers. We also share around 90% DNA with cats, dogs and elephants. https://www.amacad.org/publication/unequal-nature-geneticist... > I'm not too worried about it because it's never a 100% overlap. This doesn't make sense. If they were equa…

I think it was clear that @sedatk was referring to the 1% that separates him from other human beings, not the 99% that separates him from trees.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#367

Earlier quoted context omitted.

I simply don't want to deal with spam or scams. If I'm exposing my contact details it would be a separate set that is dedicated to dealing with communication coming from the public.

Why? You can change your phone number and your name. Good luck with doing so with your DNA.

And that is exactly why they can be changed - because they're valuable details that can be used to track someone down. Your DNA is easily obtainable and is not used in any meaningful way that would affect your life if it was exposed.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#368

Earlier quoted context omitted.

You refused a job because the company would not assist you in obtaining a perfect ("best possible") credit score? a) nobody has a perfect score b) FICO algorithms are proprietary from third-party companies, how would your potential employer have any influence?

Yes, and this is when I discovered this system which looks quite crazy to me. I am coming from abroad with experience nedded in a US company (and therefore in the US at large) and I start my finance as if I was 18. Then if there is a problem with my PII I have to worry about why it was lost. The company that lot it is going to give me a year of some kind of monitoring. Well, no. I am not really interested to depend o…

Honest question, what do other nations do to determine credit-worthiness? There has to be some sort of risk assessment on the part of banks and other financial institutions. And that risk assessment would have to be made for immigrants there as well, presumably with less/zero data?

FWIW, as much as Americans complain about the credit score system, it's mostly not a problem (for most people, most of the time). It's not hard for a middle-income person to earn and maintain a top-tier score (800+) and the lowest possible APRs when borrowing.

And assuming a prospective employer would assist you with finding housing, it's not hard for an immigrant to begin building their credit score. Just make sure your landlord reports rent to the credit agencies and take out a credit card. 3-6 months later, you have a decent score.

Identity theft is a real problem, but that extends well beyond the credit agencies.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#369

Earlier quoted context omitted.

Yes, and this is when I discovered this system which looks quite crazy to me. I am coming from abroad with experience nedded in a US company (and therefore in the US at large) and I start my finance as if I was 18. Then if there is a problem with my PII I have to worry about why it was lost. The company that lot it is going to give me a year of some kind of monitoring. Well, no. I am not really interested to depend o…

Honest question, what do other nations do to determine credit-worthiness? There has to be some sort of risk assessment on the part of banks and other financial institutions. And that risk assessment would have to be made for immigrants there as well, presumably with less/zero data? FWIW, as much as Americans complain about the credit score system, it's mostly not a problem (for most people, most of the time). It's no…

You go to a bank (people often go their bank with some expectation of a better rate) or you use check online comparator to see what deal you can get.

Then the bank will look at your current funds, the job you have, the earnings you have and after some abracadabra they will say yes or no.

There is no building of trust the assessment is on what you have and what you are capable of.

The credit is usually 1/3 of your salary (at least in France) and you novadays have to provide about 20-30% of the total amount.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#370
post #274

I have tried to quickly diff the previous TOS with the new one and I wasn't able to identify any big changes. I would like to know what the actual changes are. I see a lot of articles criticizing the new TOS, but no one is showing the actual wording differences. Does anyone have an actual diff?

Comparing: https://www.23andme.com/legal/terms-of-service/full-version/... https://www.23andme.com/legal/terms-of-service/full-version/ two things jump out at me, as a layman: insertion into the middle of Limitation of Liability "WITHIN THE LIMITS ALLOWED BY APPLICABLE LAWS, YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT 23ANDME SHALL NOT BE LIABLE FOR ANY DAMAGES" Lots of changes to the Dispute Resolution, and new content…

Ah, I really appreciate this. I did not know that the old TOS was available under the /4.1 link. And I like the full-version links!

In case the older version goes away, here is the archive.org version from October 25, 2023:

https://web.archive.org/web/20231025013949/https://www.23and...

Post reply on HN