Thread

'We hacked the FBI:' Hackers say they have data on all FBI employees

817 points · 614 comments · spenvo

jacobgold · 1790110395 · focus · HN ↗
At this point, no one seems capable of keeping a large database safe. I assume all medical and biographical information that exists is in the hands of the major state actors.
China hacked 22.1 million records of US government employees:
<a href="https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Management_data_breach" rel="nofollow">https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Manag...
1. titzer · 1790111379 · focus · HN ↗
  And the city wonders why I don't want to put my credit card info in their crappy parking app and would instead prefer to put a quarter into the meter for 30 mins.
  1. lotsofpulp · 1790111594 · focus · HN ↗
    What info can be gleaned from that? Surely the mere fact that you have a credit card means your name and billing address are floating around.
    I guess your parking history around town could be valuable if someone is targeting you.
    ceejayoz · 1790111719 · focus · HN ↗
    > What info can be gleaned from that?
    The card number?
    dylan604 · 1790112076 · focus · HN ↗
    who stores card numbers other than the processors? that should be a hangable offense. I've integrated card processing on multiple sites, and not once does the form come from me. I add the processor's JS, and it collects the data to move along. They then return to me a bit of information that includes success/fail so that I can decide what to do from there.
    ceejayoz · 1790112160 · focus · HN ↗
    > I add the processor's JS, and it collects the data to move along.
    Consumers aren't gonna notice the difference if the site gets hacked and that JS is swapped out for a malicious set.
    pixl97 · 1790113900 · focus · HN ↗
    Yea, it's insane seeing this person arguing about the nature of credit card theft when we have a million different examples of how it happens and how rarely the end user knows until it's far too late. We almost always learn about itpost ad hoc.
    dylan604 · 1790114915 · focus · HN ↗
    You've moved the goal posts. A typical site isn't storing the numbers so when they get hacked, that data is not available. If you're suggesting hackers directly injecting malicious JS to hijack card data then that's totally different. I'm not insane about this particular subject. You're just standing on a soapbox
    ceejayoz · 1790115212 · focus · HN ↗
    The parent post just says "I don't want to put my credit card info in their crappy parking app".
    "I'm only talking about long-term storage" is a goalpost move!

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.