Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Equifax Faces Multibillion-Dollar Lawsuit Over Hack

bloomberg.com

Post reply on HN
Print view View original

511–520 of 670 posts

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#511

Post by mtanski »

wildmusings wrote: post #503
panic wrote: post #438

Earlier quoted context omitted.

Since Congress defines what the law is, couldn't they do it? The only law binding Congress's lawmaking powers is the Constitution, and I don't think it restricts their ability to dissolve corporations.

In addition to what others have said, you cannot be deprived of life, liberty, or property without due process in the US.

In principle that's true...

In reality 1. You can be shot by a cop even if you do not pose a real threat (they just need to claim they though you might have a gun, simple) 2. People are routinely kept in jail for unreasonably long time because their families cannot afford bail often on things charges are dropped for later 3. Ever hear of civil forfeiture?

The whole thing is a nice story that we love to repeat to each other. Maybe it was easier to accept that during the cold war when the other guys were worse and news traveled slowly (or didn't). It's pretty apparently that isn't true given the quick news cycle... and opening any US history book.

Sometimes I wish I could myself become a corporation. Seams it's much easier to exercise your rights as a corporation.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#512

Post by wavefunction »

oh_sigh wrote: post #424
kimsk112 wrote: post #418

Earlier quoted context omitted.

https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq... said: "You'll need to supply your name, address, date of birth, Social Security number and other personal information. Fees vary based on where you live, but commonly range from $5 to $10." So depending on where you live, you probably have to pay.

I thought all 3 were free to freeze but $10 to unfreeze

$10.83 in Texas for Experian

f no I'm not paying them anything

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#513

Post by [deleted] »

anyfoo wrote: post #417
dcosson wrote: post #397

Earlier quoted context omitted.

How do you freeze them online?

Come on, that's really not hard to find out for yourself. But here are the links anyway: https://www.freeze.equifax.com/ https://freeze.transunion.com/ https://www.experian.com/freeze/center.html

[deleted]

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#514

Post by wonderwonder »

mgleason_3 wrote: post #450
wildmusings wrote: post #408

Earlier quoted context omitted.

The government can't just dissolve a corporation on a whim. We have due process and the rule of law.

What I can't believe is why there's not a criminal case against these idiots? When you are controlling something dangerous and you allow that thing to harm someone else, it's a criminal offense. It's not a matter of whether it's hard. It's simply your responsibility to ensure no one gets hurt. This company has already caused harm to literally everyone in the US. Minimally, we all now have to take action to attempt to…

If people did not go to jail for the wells fargo fiasco where willful fraud was committed, I very much doubt anyone will go to jail for this. Although you are absolutely right, someone should be severely punished for this.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#515

Post by horusthecat »

mgleason_3 wrote: post #450
wildmusings wrote: post #408

Earlier quoted context omitted.

The government can't just dissolve a corporation on a whim. We have due process and the rule of law.

What I can't believe is why there's not a criminal case against these idiots? When you are controlling something dangerous and you allow that thing to harm someone else, it's a criminal offense. It's not a matter of whether it's hard. It's simply your responsibility to ensure no one gets hurt. This company has already caused harm to literally everyone in the US. Minimally, we all now have to take action to attempt to…

Bourgeois law in its wisdom protects individual property owners from their mistakes, unless they affect owners of larger property... that said, Equifax may have just fucked over the entire retail/consumer credit industry in the US, so the hammer may very well fall on them. We might get some of those banker perp-walks everyone loves.

But with the current administration as well as Congress (we're likely to see a Federal gov't shutdown over the budget even though the Republicans control the legislature and White House), I wouldn't anticipate seeing any regulation down the pike because of this.

They mention the Struts vuln, but not which one... did an attacker access the info directly via a naive attack, or was this a campaign? Having worked on Enterprise-Ready(tm) systems I wouldn't be surprised if Equifax had an unsegmented network...

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#516

Post by toomuchtodo »

3JPLW wrote: post #168
ineptech wrote: post #150

Is it time for a Federal Department of Verifying Whether People Are Who They Say They Are? Veryifying identity with SSN is broken. The right way is probably more or less how big webapps do it - MFA + a password that the user can reset by providing a bunch of info. The government has the necessary private info to do this in most cases (e.g. DL# plus your income from last year's taxes), and can fall back to "Show up at…

USPS is a good contender for identity validation, too.

This is actually brilliant considering USPS can process passports and does banking light services (money orders).

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#517

Post by gozur88 »

cletus wrote: post #340

Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences? I looked into credit freezes yesterday. This is really a total scam. You have to _call_ each of the three agencies and pay a fee ($5 to $10) each time. If you need to unfreeze your report to make a legitimate credit application…

>Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences?

This is what pisses me off - I never gave them authorization to collect information on me. I have no business relationship with these companies. To me they look a lot like parasites even when they're not giving away my data.

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#519

Post by datums »

cletus wrote: post #340

Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences? I looked into credit freezes yesterday. This is really a total scam. You have to _call_ each of the three agencies and pay a fee ($5 to $10) each time. If you need to unfreeze your report to make a legitimate credit application…

If there is a cost it will depend on your state, all 3 were free for me

Equifax: https://www.freeze.equifax.com/Freeze/jsp/SFF_PersonalIDInfo... Experian: https://www.experian.com/consumer/cac/InvalidateSession.do?c... TransUnion: https://annualcreditreport.transunion.com/fa/securityFreeze/...

Re: Equifax Faces Multibillion-Dollar Lawsuit Over Hack

#520

Post by omilu »

matchagaucho wrote: post #470
kromem wrote: post #464

Earlier quoted context omitted.

Even with an 0-day, why was consumer data not encrypted at rest with segmentation for access? If you have the most sensitive information for millions of people, maybe don't only worry about perimeter defense?

True. A flaw in the perimeter doesn't forgive poor data management practices. Given the number of FS sites running on IBM Websphere and Struts, this may only be the tip of iceberg.

FS == Financial Service???
Post reply on HN