What is really strange about this data leak is what is missing in it. I see at least two countries that aren't there.
Really? Which two?
[deleted]
Facebook does not plan to notify half-billion users affected by data leak
61–70 of 101 posts
Re: Facebook does not plan to notify half-billion users affected by data leak
#62Facebook is probably also not planning to pay out hefty fines for GDPR violations, but alas...
Re: Facebook does not plan to notify half-billion users affected by data leak
#63So it wasn't too long ago that the news got head of the Facebook "Supreme Court" that is supposedly even above mr Zuckerberg. I wonder what would happen if you'd appeal to them about this blatant disregard of sovereign laws worldwide. I don't know a single country that does not have some law in place forcing the leaker to notify the user. Obviously barrely any country does it, and if so, Booking just got a laughable…
Even if a country decided about doing something about it, would they risk Facebook blocking that country altogether? Facebook has so much money, pretty much any fine will be just a slap on the wrist. What else they can do without causing public to go mad?
Capture Mark and make him do time?
Re: Facebook does not plan to notify half-billion users affected by data leak
#64And they apparently also didn't plan on deleting my PII (phone number was in the leak), even after I permanently deleted my account at FB over 3 years ago. I thought I had the 'right to be forgotten' because of the GDPR, as I'm a European citizen. Has there been any real enforcement of these laws aside from the relatively small fine here and there? I've been blocking FB actively for the last few years, I can't even v…
I think after such data leak, it should be possible to ask company who enabled the leak, to put the matters as they were before the leak - that is buying you a new phone number, setting up a new name, new address and whatever else that was leaked. The new address should be in comparable standard to the old one.
Re: Facebook does not plan to notify half-billion users affected by data leak
#65So after longing it out, today I had a look on haveibeenpwned, and it seems I am one of those whose data has leaked. After re-reading all of the events of this breach, it seems that the exploit was fixed in Aug 2019 (as claimed by Facebook). I had deleted my account some 2 years prior to that. Either these attackers have had access for over 2 years, or Facebook has not deleted my data, and likely everyone else's data…
haveibeenpwned pulls from multiple data leaks. So it is likely your data was leaked somewhere else and the company that got hacked simply never reported it. Happens all the time. Once your data has been leaked. There is nothing you can do about it. Your information will simply just float out there in the internet ether forever.
This is why it is so important for everyone to go pseudonymous online especially if you are doing ANYTHING that can be remotely viewed as controversial, like political speech. The reality is whether you like it or not, your personal information will be leaked.
I know these days everyone wants to be a social activist on social media today but just don't do it. It is not worth it if some nut job decides to go after you for whatever reason. It is very easy these days to find where people live, work, phone numbers etc by simply knowing their first name, last name and general location of where they live. Most people openly disclose this information.
Re: Facebook does not plan to notify half-billion users affected by data leak
#66Aren't they required to disclose this, at least to California residents, under California's data breach disclosure laws? Or was it not the type of PII covered under the law?
In EU law too. Booking.com just got convicted half a million just for notifying TOO LATE (two weeks after the fact). I assume they expect to claim it's not a fb leak in some convoluted way, otherwise I don't understand that move. Oh wait, weren't there also shadow numbers in this ? Aka you had my number you uploaded it so it's in the leak even though I had no relation to them ? Might be why, they have no right to con…
Yeah, but the b.com leak involved credit card data which changes everything in the eyes of regulators. Sadly this is not true for "mundane" data like phone numbers, email addresses, or even physical addresses.
Re: Facebook does not plan to notify half-billion users affected by data leak
#67Earlier quoted context omitted.
Wall Street fueled by Jim Cramer's FAANG doesn't care about consumer privacy.
Because Wall Street realizes even consumers don't care about consumer privacy. If Ashley Madison and Equifax walked away with barely a scratch from their catastrophic breaches, then this is almost nothing in comparison.
I genuinely don't understand how Equifax is allowed to exist post-hack.
Re: Facebook does not plan to notify half-billion users affected by data leak
#68Earlier quoted context omitted.
Wall Street fueled by Jim Cramer's FAANG doesn't care about consumer privacy.
Because Wall Street realizes even consumers don't care about consumer privacy. If Ashley Madison and Equifax walked away with barely a scratch from their catastrophic breaches, then this is almost nothing in comparison.
So what? Failure to disclose is illegal many places for good reason, and the relevant authorities are the ones who need to be doing shit about this. No one expects consumers to regulate other areas, why tech?
Re: Facebook does not plan to notify half-billion users affected by data leak
#69A scrape is not a leak
Well, FB doesn't allow me to export my own contacts' details - email, phone number, etc - with it's data export, so no, this is a leak.
Re: Facebook does not plan to notify half-billion users affected by data leak
#70Earlier quoted context omitted.
It’s going over your wifi, right? To start, you could evaluate whether the upload bandwidth could fit a video signal.
I think there is no doubt it isn't uploading a raw video signal. But all kinds of things could be derived from that video and uploaded.
It's a powerful device with superb cameras & sensors, used to play user specific content, running totally unauditable code, connected to the Internet and requiring a real identity account to even start.
What could possibly go wrong.