Cybersecurity

5753 readers

475 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago

MODERATORS

kid

[email protected]

108

23andMe tells victims it's their fault that their data was breached | TechCrunch (techcrunch.com)

submitted 10 months ago by Eezyville to c/cybersecurity

11 comments fedilink hide all child comments

They're blaming customers for not having good cybersecurity practices instead of themselves for not having good cybersecurity practices.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 31 points 10 months ago (2 children)

From a PSA stand point, 23andMe makes a really good point here.

From a Legal / Responsible Data Custodian perspective, it's the same collective responsibility bullshit that the oil industry likes to shit out about climate change.

[+] [email protected] 14 points 10 months ago* (last edited 10 months ago) (1 children)

[deleted]

[–] starman2112 7 points 10 months ago (2 children)

The issue isn't just reuse of passwords. Only about 14,000 accounts were breached because of bad passwords. The problem is that those 14k accounts allowed bad actors to access the personal information of nearly 7 million people. It's less "you shouldn't have reused your password," it's more "your neighbor's cousin's sister-in-law's nephew shouldn't have reused his password"

[–] dream_weasel 1 points 10 months ago

... And you should not opt in to sharing data with people whose security practices you don't know.

Don't print your SSN and give it to your inlaws or your grandma. Or your credit card info or anything else.

[–] [email protected] 7 points 10 months ago

While it's not the point 23andMe wants to make here, it is an absolutely horrible idea to allow a company to access, catalog and sell your DNA information. Shame they didn't touch on that point.