Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

23andMe changed its terms of service to prevent hacked customers from suing

engadget.com

Post reply on HN
Print view View original

371–380 of 402 posts

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#371

Post by alistairSH »

BrandoElFollito wrote: post #369
alistairSH wrote: post #368

Earlier quoted context omitted.

Honest question, what do other nations do to determine credit-worthiness? There has to be some sort of risk assessment on the part of banks and other financial institutions. And that risk assessment would have to be made for immigrants there as well, presumably with less/zero data? FWIW, as much as Americans complain about the credit score system, it's mostly not a problem (for most people, most of the time). It's no…

You go to a bank (people often go their bank with some expectation of a better rate) or you use check online comparator to see what deal you can get. Then the bank will look at your current funds, the job you have, the earnings you have and after some abracadabra they will say yes or no. There is no building of trust the assessment is on what you have and what you are capable of. The credit is usually 1/3 of your sal…

It's also worth noting there is no singular credit score in the US. There are (at least) 3 agencies that generate credit reports. The "score" is usually the FICO score, but there are versions of FICO Score, and other scores.

In France, how doe a lender know if you have other loans/debt outstanding? Or if you have a history of non-payment? Those two make up the majority of a credit score (35% payment history, 30% debt burden). And the credit score is just one piece of an overall credit report.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#372

Post by bogwog »

hot_gril wrote: post #150
bogwog wrote: post #128

Earlier quoted context omitted.

You can at least change your name. You can't change your DNA, so when companies start selling that data it will be easy to detect when you give out fake information. The only missing piece is a way to scan your DNA as part of a login form.

What good is my DNA without a real identity attached to it?

Idk, it probably has some value. But my point was that it's going to be difficult to prevent your real identity from becoming attached to your DNA forever. The moment your real (DNA, identity) pair leaks from a credible source, your privacy is permanently and retroactively ruined.

So if 23andMe leaked a fake name with your DNA, it's out there in the hands of advertisers/scammers/governments/etc. From now on, anyone who gets access to your DNA will be able to build up data on you, and all it will take is a single leak/sale from a credible source to make it accurate.

(...but in truth, I have no idea what "DNA data" looks like, or if it's even possible to use it for targeting...)

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#373

Post by sobkas »

brokencode wrote: post #271
alephnan wrote: post #133

Earlier quoted context omitted.

I am logging to my 23andme account to confirm my info and name registered there. I forgot my password and did a password reset. They have password requirement of 12 characters minimum. A bunch of security theater just to get hacked anyways

So as soon as a company gets hacked once, all of their security measures get recategorized as security theater?

> So as soon as a company gets hacked once, all of their security measures get recategorized as security theater?

Failing to secure user data and then overcompensate on user side is a security theatre. It's like having complicated lock on a cardboard box.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#374

Post by DesiLurker »

michaelcampbell wrote: post #319
DesiLurker wrote: post #309

Earlier quoted context omitted.

you can actually ask them to destroy your samples and any associated data.

And to whomever they've already likely sold it to, or in the case of gov'ts and police, given it to?

yes that ship has sailed but my comment is based on assumption that since they are going for this type of carte-blanch tos update they will be much more likely to sell to anybody going fwd (or stolen). the govt and police one is tricky because that will never go away in this digital age. that is essentially permanent record now.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#375

Post by hot_gril »

bogwog wrote: post #372
hot_gril wrote: post #150

Earlier quoted context omitted.

What good is my DNA without a real identity attached to it?

Idk, it probably has some value. But my point was that it's going to be difficult to prevent your real identity from becoming attached to your DNA forever. The moment your real (DNA, identity) pair leaks from a credible source, your privacy is permanently and retroactively ruined. So if 23andMe leaked a fake name with your DNA, it's out there in the hands of advertisers/scammers/governments/etc. From now on, anyone w…

If someone else is leaking a credible ID/DNA combo, it doesn't matter whether or not I did 23andMe.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#376

Post by listenallyall »

BrandoElFollito wrote: post #369
alistairSH wrote: post #368

Earlier quoted context omitted.

Honest question, what do other nations do to determine credit-worthiness? There has to be some sort of risk assessment on the part of banks and other financial institutions. And that risk assessment would have to be made for immigrants there as well, presumably with less/zero data? FWIW, as much as Americans complain about the credit score system, it's mostly not a problem (for most people, most of the time). It's no…

You go to a bank (people often go their bank with some expectation of a better rate) or you use check online comparator to see what deal you can get. Then the bank will look at your current funds, the job you have, the earnings you have and after some abracadabra they will say yes or no. There is no building of trust the assessment is on what you have and what you are capable of. The credit is usually 1/3 of your sal…

Honestly, I have no idea how other countries' banks make loan decisions. But I wouldn't be surprised if "after some abracadabra" involves reviewing some kind of centralized credit history.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#377

Post by switchbak »

snapcaster wrote: post #224
switchbak wrote: post #100

Earlier quoted context omitted.

Why would you be angry at someone that didn't do anything that negatively affects you? Do you get mad at people that eat unhealthy food?

Yes actually

Well that anger (stress) is doing you harm. Do you get angry at yourself that your anger towards others is reducing your lifetime?

Maybe just live your own life instead.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#378

Post by switchbak »

bogwog wrote: post #372
hot_gril wrote: post #150

Earlier quoted context omitted.

What good is my DNA without a real identity attached to it?

Idk, it probably has some value. But my point was that it's going to be difficult to prevent your real identity from becoming attached to your DNA forever. The moment your real (DNA, identity) pair leaks from a credible source, your privacy is permanently and retroactively ruined. So if 23andMe leaked a fake name with your DNA, it's out there in the hands of advertisers/scammers/governments/etc. From now on, anyone w…

Yeah I don't understand how someone's anonymous DNA being on that site makes the situation worse.

If someone finds my DNA without my identity, they're no further ahead. If they do have my DNA and my identity, well the 23andme part gives no additional information.

Maybe some day this will be a big concern, but by then we'll have much bigger things to worry about.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#379

Post by zlg_codes »

necovek wrote: post #350
dekhn wrote: post #267

Earlier quoted context omitted.

What real, actual risks which I didn't already know about have been shown in this thread? The point is that while you can use DNA to identify people in most cases, sufficiently motivated adversaries have more effective, cheaper, lower-technology approaches that they will use first.

Like with many things, the issue is the aggregation of data on many individuals (a database), and easy accessibility of your individual data on request (discoverability and processing). Me shouting my sensitive private details in a crowded bar is entirely different from putting them on my webpage. There's even a difference between writing them down on a napkin or shouting them out.

Forget about it dude, the other guy's just trolling and hiding his criteria for 'real threat' so he can act like nobody's good enough.

I guess it's representative of the demographics here. Nobody capable of conducting themselves honestly.

Re: 23andMe changed its terms of service to prevent hacked customers from suing

#380

Post by hot_gril »

logifail wrote: post #199
xvector wrote: post #27

Earlier quoted context omitted.

I am a security engineer. When I signed up for 23andme, I assumed with certainty that it would be hacked and all data leaked at some point. I balanced that with the value of knowing potentially important health/genetic bio markers. In the end, I valued knowing these bio markers above the privacy of my genome. The former is actionable and I can use it to optimize my health and longevity; the latter is of vague value a…

> I can use it to optimize my health and longevity Q: Is it a HN thing to be (obsessively?) interested in health and longevity? Dying is a natural process. Sorry.

And I'm probably gonna die before any of these theoretical DNA privacy risks becomes real.
Post reply on HN