Live data from Hacker News

Facebook does not plan to notify half-billion users affected by data leak

reuters.com

91–100 of 101 posts

Re: Facebook does not plan to notify half-billion users affected by data leak

#91
post #4

Facebook today closed at a record high of 309, up from 299, on the first trading day after this leak hit the press. It has since increased to a higher record high (currently 312 with 10 minutes left)

Give that the data leak is 2+ years old I’m wondering why it’s getting so much attention in the media right now, just as FB hits record highs. The cynic inside me suspects that this is actually a ploy to manipulate the stock price, though I can’t tell who would benefit from it.

Re: Facebook does not plan to notify half-billion users affected by data leak

#93

Earlier quoted context omitted.

It does if your average user is so uneducated they freeze up and whack the next button until the screen with all those words on it goes away.

If someone signs a bad contract because they refuse to read and understand it, and just signs it anyways, they're still generally bound by the terms of the contract. iOS and Android both have pretty clear descriptions in their permissions dialog of what the app is asking for.

It's not a bad contract for that someone though. It's a bad contract for that someones friends.

Re: Facebook does not plan to notify half-billion users affected by data leak

#94
post #70

Earlier quoted context omitted.

I think there is no doubt it isn't uploading a raw video signal. But all kinds of things could be derived from that video and uploaded.

It's a powerful device with superb cameras & sensors, used to play user specific content, running totally unauditable code, connected to the Internet and requiring a real identity account to even start. What could possibly go wrong.

I can’t wait to plug it into my brain stem!

Re: Facebook does not plan to notify half-billion users affected by data leak

#95
post #66
post #37

Earlier quoted context omitted.

In EU law too. Booking.com just got convicted half a million just for notifying TOO LATE (two weeks after the fact). I assume they expect to claim it's not a fb leak in some convoluted way, otherwise I don't understand that move. Oh wait, weren't there also shadow numbers in this ? Aka you had my number you uploaded it so it's in the leak even though I had no relation to them ? Might be why, they have no right to con…

Yeah, but the b.com leak involved credit card data which changes everything in the eyes of regulators. Sadly this is not true for "mundane" data like phone numbers, email addresses, or even physical addresses.

In regards to GDPR, personally identifiable information is the main focus.

Re: Facebook does not plan to notify half-billion users affected by data leak

#96
post #4

Facebook today closed at a record high of 309, up from 299, on the first trading day after this leak hit the press. It has since increased to a higher record high (currently 312 with 10 minutes left)

Give that the data leak is 2+ years old I’m wondering why it’s getting so much attention in the media right now, just as FB hits record highs. The cynic inside me suspects that this is actually a ploy to manipulate the stock price, though I can’t tell who would benefit from it.

Because the data is now widely available to anyone and his dog

Re: Facebook does not plan to notify half-billion users affected by data leak

#97
post #28
post #9

Earlier quoted context omitted.

Well this breach is an old breach from 2019. People should stay up to date with security breaches.

Wasnt there some hints that parts of the leaked PII are more recent?

nope

Re: Facebook does not plan to notify half-billion users affected by data leak

#98

Aren't they required to disclose this, at least to California residents, under California's data breach disclosure laws? Or was it not the type of PII covered under the law?

Not happening because at best FTC can fine them. That is just cost of business to them these days. Its part of their move fast and break things philosophy.

Re: Facebook does not plan to notify half-billion users affected by data leak

#99
post #7

Earlier quoted context omitted.

Wall Street fueled by Jim Cramer's FAANG doesn't care about consumer privacy.

Because Wall Street realizes even consumers don't care about consumer privacy. If Ashley Madison and Equifax walked away with barely a scratch from their catastrophic breaches, then this is almost nothing in comparison.

I think people do care, its just impossible for them to express how much they care. Like I want to do something about this data breach, what else can I do apart from remove myself from facebook (there is good evidence that that wouldn't help me either)? Its a monopolistic market and they are very good at hiding the risks. People don't accept random spam and data leaks out of not caring, but because even if they care the current business models will not care about their opinion.

Re: Facebook does not plan to notify half-billion users affected by data leak

#100
As others noted in the other thread (https://news.ycombinator.com/item?id=26736285), the correct action here would be a punitive fine by FTC or FCC for 1) the size of the leak and 2) that FB is refusing to notify impacted users.

Something to the tune of $30-50B, to also send a clear message to all other companies. In this case, FB appears to have sat idle since previous $5B fine for the Cambridge Analytica fiasco. So 10X that previous fine would seem appropriate.

Long term, holding the leaders and board of companies criminally liable for user PII and data leaks (similar to SOX compliance) might be the best solution. The reality, however, is that no such regulation will occur and companies like FB can continue to lackadaisically treat user privacy and data security.

Post reply on HN