Thread

'We hacked the FBI:' Hackers say they have data on all FBI employees

817 points · 614 comments · spenvo

jacobgold · 1790110395 · focus · HN ↗
At this point, no one seems capable of keeping a large database safe. I assume all medical and biographical information that exists is in the hands of the major state actors.
China hacked 22.1 million records of US government employees:
<a href="https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Management_data_breach" rel="nofollow">https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Manag...
1. titzer · 1790111379 · focus · HN ↗
  And the city wonders why I don't want to put my credit card info in their crappy parking app and would instead prefer to put a quarter into the meter for 30 mins.
  1. lotsofpulp · 1790111594 · focus · HN ↗
    What info can be gleaned from that? Surely the mere fact that you have a credit card means your name and billing address are floating around.
    I guess your parking history around town could be valuable if someone is targeting you.
    ceejayoz · 1790111719 · focus · HN ↗
    > What info can be gleaned from that?
    The card number?
    Barbing · 1790112020 · focus · HN ↗
    In USA, folks who check their statements monthly are at little risk of immediate financial pain there.
    When your lifetime of credit card transactions leaks, that could be financially painful, embarrassing, etc. (can be discriminated against, including with pricing)
    I do dislike creating a log of where I park on some random company’s server. Nice that ALPRs/govt.-funded corp spycams/Ring/etc. make sure the quarter method is minimally marginally effective at protecting privacy.
    ceejayoz · 1790112197 · focus · HN ↗
    > In USA, folks who check their statements monthly are at little risk of immediate financial pain there.
    I had to fight a bank for months over a clearly fraudulent charge. Sometimes it's easy; other times it isn't.
    Barbing · 1790132061 · focus · HN ↗
    Yikes, that’s too bad. Have had two incredibly easy chargeback experiences (lifetime).
    Can’t speak to fraudulent bank charges, by the way, only on the credit card side.
    chrsstrm · 1790112035 · focus · HN ↗
    In 2026, having my credit card number compromised is the least of my worries. At least here there is an established process for denying charges and ordering a new card. As long as you're not using a debit card, this is not a big deal.
    dylan604 · 1790112180 · focus · HN ↗
    My bank will reverse debit card charges. Based on that, I assumed that was a standard thing now.
    bluGill · 1790112870 · focus · HN ↗
    The problem is debit cards leave a window where you don't have access to your own money until it gets reversed.
    asdff · 1790114728 · focus · HN ↗
    What happens with credit card? Is your line of credit reduced until it gets reversed?
    bluGill · 1790117151 · focus · HN ↗
    Most people have a line of credit for larger than their actual use. With a debit card that's coming right out of your account, which means your mortgage, if it comes in before you notice the issue, is going to then fail.
    This is also partially that people don't put critical bills on their credit card typically. And even if your credit card does get maxed out, you typically would have a second credit card handy. But those credit card payments have to come out of your bank account and so you're risking that you intend to pay your credit card you said Set whatever it is to send the money in but there's no money in your account And so it doesn't get paid and now you have late fees on other accounts
    If your debit card is going to a different bank than what you normally pay all your bills out of, this is not a worry. That is not how most people I know handle their banking though, which is why it is a real problem to worry about.
    rationalist · 1790133209 · focus · HN ↗
    I put my autopay bills on a credit card that sits in my safe. The only reason it would see a fraudulent charge is if one of the few companies that has the card information, is hacked. And that actually happened once.
    rationalist · 1790133131 · focus · HN ↗
    My bank just removes the charge if I say it is fraudulent. If I dispute a charge (I made a purchase but the other end didn't hold up their end), then my bank gives me a credit until the dispute is resolved.
    Perhaps not everyone has a good credit card and/or bank though, idk.
    dylan604 · 1790114768 · focus · HN ↗
    Only time I've seen that is the stupid holds that hotels do for deposits. The time I had the bank correct a debit card issue had the money available immediately. The only real hold on the account was waiting for the new card to arrive, but the funds were available
    pixl97 · 1790113788 · focus · HN ↗
    Ok, your card is compromised. It's been cancelled.
    One, how much money is in your pocket so you can eat?
    ok, you'll use your second ca.... oh, it has to be cancelled now too.
    Ok, lets wait a few days for another card, and lets go use it the first time, what hacked already, I guess I need to wait a few more days.
    >As long as you're not using a debit card, this is not a big deal.
    So screw 60% of all transactions done on a card? This doesn't seem workable.
    [deleted] · 1790114468 · focus · HN ↗
    [deleted]
    lotsofpulp · 1790117021 · focus · HN ↗
    Meh, I’ve been giving out my credit card number willy nilly for 20+ years, and it hasn’t been used without my authorization over the course of what must be tens of thousands of transactions.
    I have a text alert setup for transactions, so I presume I’d be able to successfully challenge any fraudulent ones pretty quickly.
    rationalist · 1790133384 · focus · HN ↗
    Me too. Interestingly my card has only been fraudulently used after I gave it to a waiter at a high-end restaurant, and at a gas pump in a small town.
    xkcd1963 · 1790435560 · focus · HN ↗
    Please do not comment on fraudulent activities on hackernews that goes against the community guidelines
    cyberax · 1790117205 · focus · HN ↗
    Your physical wallet might also get stolen, and you can be left without cash money.
    It's a good practice to keep an emergency debit card at home. And/or a gift card with a couple hundred bucks on it. That's for digital expenses.
    And you should also have a bit of emergency cash.
    BenjiWiebe · 1790117623 · focus · HN ↗
    Why do you have to cancel your second card?
    The chance is incredibly small that your second card just happens to get hacked at the same time as your first card.
    I have 6 (I think) credit cards, and mainly use 3 of them.
    dylan604 · 1790112076 · focus · HN ↗
    who stores card numbers other than the processors? that should be a hangable offense. I've integrated card processing on multiple sites, and not once does the form come from me. I add the processor's JS, and it collects the data to move along. They then return to me a bit of information that includes success/fail so that I can decide what to do from there.
    ceejayoz · 1790112160 · focus · HN ↗
    > I add the processor's JS, and it collects the data to move along.
    Consumers aren't gonna notice the difference if the site gets hacked and that JS is swapped out for a malicious set.
    pixl97 · 1790113900 · focus · HN ↗
    Yea, it's insane seeing this person arguing about the nature of credit card theft when we have a million different examples of how it happens and how rarely the end user knows until it's far too late. We almost always learn about itpost ad hoc.
    dylan604 · 1790114915 · focus · HN ↗
    You've moved the goal posts. A typical site isn't storing the numbers so when they get hacked, that data is not available. If you're suggesting hackers directly injecting malicious JS to hijack card data then that's totally different. I'm not insane about this particular subject. You're just standing on a soapbox
    ceejayoz · 1790115212 · focus · HN ↗
    The parent post just says "I don't want to put my credit card info in their crappy parking app".
    "I'm only talking about long-term storage" is a goalpost move!

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.