this post was submitted on 23 Jan 2024
257 points (93.3% liked)

Technology

59675 readers
3168 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 92 points 10 months ago (2 children)

Kind of worrying when their source is a “data breach information website” that does advertorials for “the most safe password manager” NordPass. 🤮 The internet of today has become a pile of absolute shit.

[–] [email protected] 20 points 10 months ago (4 children)

We should make a new internet in the dark web, but only invite cool people. No billionaires, narcs nor finks allowed !

[–] [email protected] 17 points 10 months ago (3 children)

No narcs or finks? What about patsies or stoolies? Can we at least have phonies?

[–] [email protected] 11 points 10 months ago (2 children)

I’ll give you one chump and half a busta, but that’s all you’re getting!

load more comments (2 replies)
load more comments (2 replies)
load more comments (2 replies)
[–] [email protected] 50 points 10 months ago (6 children)

I think it's gotten to the point that we. (Collective) Have to start using alias. I know proton for a price gives fake mobile and email address.

I have started using a 5th email to sign up to things. Have an extra number as well. It's beyond a joke really.

Tried to sign up for a budget app and it requires email phone and address.

No. No you don't require any of that. You want that to sell. And you've likely got inadequate protection.

Nobody but my bank job and maybe a few places require all my info.

[–] [email protected] 4 points 10 months ago* (last edited 10 months ago) (6 children)

Oh proton gives mobile too... Ya know I didn't feel like paying for the mail thing as I can have my domain and relay easily but the mobile thing I didn't know.

But I will be honest I didn't see it mentioned on the web, it's already a thing?

load more comments (6 replies)
load more comments (5 replies)
[–] [email protected] 36 points 10 months ago (2 children)

Not until a politician or billionaire is harmed by these breaches will we see some action.

[–] [email protected] 17 points 10 months ago

They’ll get justice, you’ll get a check in the mail for 3 dollars, after some lawyers win a class action lawsuit.

[–] [email protected] 8 points 10 months ago (1 children)

I don't think so.

Trump himself was victim of credential stuffing. And he's not the only politician or billionaire who has suffered stolen accounts of something.

load more comments (1 replies)
[–] [email protected] 25 points 10 months ago

That seems weird, it's called mother of all breaches, but isn't the result of any one breach. It's just data collection from ordinary breaches with perhaps some credential stuffing in the mix.

[–] [email protected] 23 points 10 months ago (7 children)

Definitely recommend a password vault to anyone that doesn't already use one. After this next hack leaks, I imagine you'll get at least a couple of attempts on your email/phone.

[–] [email protected] 8 points 10 months ago* (last edited 10 months ago)

I had an identity theft a few years back, still cleaning up from it. At the time I had the typical set of standard passwords that I would use. I thought they were ok since they were pretty random but I had one for Financial, one for Web Services, etc. so of course when the creds leaked, I suddenly had a bunch of credit card bills I never signed up for..

Since then, every password is unique, my default is 31 characters, and 2-factor for everything possible. Unfortunately I initially settled on LastPass, figured that they had hopefully learned their lesson from their breach years ago. Then it happened again recently and I moved to Bitwarden so that I can eventually migrate to a self-hosted solution.

I've been trying to get my family on board for years but it's still too complex. Non-technical folk still will take the path of least resistance, even when the dangers are right in front of their face. We need something better.

load more comments (6 replies)
[–] [email protected] 22 points 10 months ago (1 children)

My data has been stolen so often I have free monitoring for the rest of my life.

[–] [email protected] 7 points 10 months ago

And everyone should just assume that every account they have will be hacked. Because it already is, they just haven’t found out yet (assume breach).

[–] [email protected] 20 points 10 months ago

"The MOAB contains 26 billion records over 3,800 folders, with each folder corresponding to a separate data breach. While this doesn’t mean that the difference between the two automatically translates to previously unpublished data, billions of new records point to a very high probability, the MOAB contains never seen before information." Totaling 12TB.

[–] [email protected] 19 points 10 months ago* (last edited 10 months ago) (1 children)

I've always thought LinkedIn is nothing more than a massive treasure trove of personal information just waiting to be harvested by thieves wanting the entire life and work history of millions of upwardly mobile career focused people.

[–] [email protected] 5 points 10 months ago (1 children)

Work History ok... But entire life... I guess people that used like it's Facebook maybe? 🤔

load more comments (1 replies)
[–] [email protected] 7 points 10 months ago* (last edited 10 months ago) (1 children)

I honestly wonder if my data wouldn't be safer on some sites, if I skipped two-factor authentication and a recovery email, and simply used my date of birth as a password. At least then, they'd wouldn't be able to leak the phone number or email adress, because I was never forced to give it to them.

It's even more annoying, because you can't easily avoid many of these companies. Eg. for jobs it's really hard to get around using linkedin. I mean, I refuse out of principe and have for years, so my data's a decade out of data, but it's obviously cost me opportunities.

There are almost certainly pictures of me floating around social media, taken without my permission, but tagged by facebook or google just in case I had any fucking privacy. And now thanks to some phones. they also have our finger prints and retinal scans, which will inevitably get leaked sooner rather than later. I pity the poor chumps whose DNA was leaked, that's even worse. Most of that will probably be leaked sooner or later, if it hasn't already, because it turns out a subcontractor used the youtube comment section to communicate between departments.

If I had the technical ability, I would design a two-factor authentication system based on rectal scans.

"Here at OmniCorp we believe all our customers our unique, that's why we believe in securing your data by linking your DNA, phonenumber, social security number, retinal scan and finger print, with a picture of your anus. Bend Over. The Future's Now."

load more comments (1 replies)
[–] [email protected] 4 points 10 months ago* (last edited 10 months ago)

Tencent tops the chart, with 1.5 billion records leaked, followed by Weibo at 504 million and MySpace at 360 million.

MySpace in the news as Top Western Leaker

[–] [email protected] 4 points 10 months ago

We just need a free dart monkey or two, it'll be fine.

load more comments
view more: next ›