Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

120M American Households Exposed In 'Massive' ConsumerView Database Leak

forbes.com

Post reply on HN
Print view View original

41–50 of 163 posts

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#41

Post by AnimalMuppet »

bogomipz wrote: post #26
ams6110 wrote: post #4

Earlier quoted context omitted.

The horse is out of the barn. We need to make the data itself worthless. There's no getting it back.

How would we go about making the data worthless?

As others have said on other comments on this article, everyone has to stop using that data (all of it) for purposes of verifying that you are who you claim to be.

My initial thought was "good luck with that", but maybe, in an ironic sort of way, these breaches are going to force that to happen.

"You say someone opened a credit card in my name, and you want me to pay for what they charged? What data did they use to open the account? Um, yeah, have you heard about the Experian breach? So you know that the entire internet has that data about me? Yeah, good luck collecting, suckers."

If that holds up in court (at not too great expense for the party being sued to pay the debt that isn't theirs), then financial institutions (all of them) are going to learn very quickly not to rely on that information for anything.

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#42

Post by CaptSpify »

pmc1 wrote: post #38
RcouF1uZ4gsC wrote: post #6

Personal data right now is considered an asset. It needs to be seen as a liability. Maybe the solution is a data tax. You pay a set amount every year for every piece of personal data you have. If you buy personal data from another company, you still have to pay the tax for the data you acquired. If you have a breach of data, your tax goes up for a period of 10 years. In addition, every piece of personal data needs to…

> If you have a breach of data, your tax goes up for a period of 10 years. You do know it is impossible thwart all data breaches right? You can have the most sophisticated security system created and Zero-day attacks are still bound to occur. Data breaches occur without the companies themselves even knowing they took place... Geniuses are on the offensive side, if they want in, they will get in. No company in the rig…

If you can't keep the data secret, then maybe don't store data worth stealing. Yeah, breaches will always occur, but this data shouldn't have been piled up in the first place.

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#43

Post by bllguo »

freeflight wrote: post #33
bogomipz wrote: post #26

Earlier quoted context omitted.

How would we go about making the data worthless?

One, rather drastic, approach would be making the data of everybody freely available to everybody, think post-privacy society. At least that's how I originally imagined this Internet thing to play out as, too bad it took the exact opposite direction.

I like drastic, because what else is going to spur the powers that be to revamp how we approach identification? Something dramatic like this is almost necessary at this point. Equifax was huge and yet what reforms have we seen? Is anything even in the pipeline?

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#45

Post by rbcgerard »

joshuaheard wrote: post #23
RcouF1uZ4gsC wrote: post #6

Personal data right now is considered an asset. It needs to be seen as a liability. Maybe the solution is a data tax. You pay a set amount every year for every piece of personal data you have. If you buy personal data from another company, you still have to pay the tax for the data you acquired. If you have a breach of data, your tax goes up for a period of 10 years. In addition, every piece of personal data needs to…

It's my data, why should they pay a tax to the government for it? How about a data royalty. You use my data, you must pay me a royalty.

Yes! And if you “lose” my data you owe me big money.

Also have the fine scale exponentially by data items.... data set of 100 people with 2 items (name and email = $400 total or ($2x$2=$4 per user x 100 users)).

Data set with 1 million users and 10 fields per user would be $1B and $1,024 paid to each person...

Then make companies bond their liability - with recourse against anyone up the chain of title if the data was purchased...

Perhaps a bit draconian...

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#46

Post by CaptSpify »

ThrustVectoring wrote: post #39
makecheck wrote: post #17

All personal information sharing should now be purely digital and encryption-keyed. We have all of the protocols, interconnected networking and ubiquitous computing necessary to make it practical. The only “data” any organization should receive is an encrypted blob that is constructed using the key of the person who owns the data and the key of the entity that was directly given the data. Furthermore, the encoded blo…

A big problem with this is that a lot of data about you isn't owned by you. The fact that you took out credit card X on Y date and have paid the balance on time since then is owned by the credit card company you do business with (well, it belongs to you too, but businesses are more willing to trust Chase than you). This information has real business value from being a leading indicator and costly signal of your futur…

At the risk of speaking for OP: The point is that the data should be owned by me. Yeah, I get that it has value to other people, but I'm the one that has to deal with the fallout, not them. Just because something is useful to a business doesn't mean that they have the right to it. If they want information about me, they should be asking me, not some third party.

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#47

Post by [deleted] »

kylehotchkiss wrote: post #36
joshuaheard wrote: post #23

Earlier quoted context omitted.

It's my data, why should they pay a tax to the government for it? How about a data royalty. You use my data, you must pay me a royalty.

The royalty is free access to Facebook, instagram, [insert free web service name here]

[deleted]

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#48

Post by AnimalMuppet »

perseusprime11 wrote: post #37

Does it still make sense to shred our personal documents with our names and addresses? Given so many leaks, it may be more easy to get our information online than going through our garbage.

If I don't shred it, I usually dump it into a particular trash can. The bag from that trash can is the one I usually use for cleaning out the cat litter. If someone wants to steal it from my trash can, it may be possible, but they're going to earn it.

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#49

Post by jay_kyburz »

freeflight wrote: post #33
bogomipz wrote: post #26

Earlier quoted context omitted.

How would we go about making the data worthless?

One, rather drastic, approach would be making the data of everybody freely available to everybody, think post-privacy society. At least that's how I originally imagined this Internet thing to play out as, too bad it took the exact opposite direction.

yeah, I'd prefer the data were simply out there, at least average people would know and understand what is known about themselves.

Re: 120M American Households Exposed In 'Massive' ConsumerView Database Leak

#50

Post by TylerE »

rbcgerard wrote: post #45
joshuaheard wrote: post #23

Earlier quoted context omitted.

It's my data, why should they pay a tax to the government for it? How about a data royalty. You use my data, you must pay me a royalty.

Yes! And if you “lose” my data you owe me big money. Also have the fine scale exponentially by data items.... data set of 100 people with 2 items (name and email = $400 total or ($2x$2=$4 per user x 100 users)). Data set with 1 million users and 10 fields per user would be $1B and $1,024 paid to each person... Then make companies bond their liability - with recourse against anyone up the chain of title if the data wa…

You've just shut down every personal blog and small (or medium or large...) forum on the Internet.
Post reply on HN