logoalt Hacker News

jacobgoldtoday at 8:53 PM9 repliesview on HN

At this point, no one seems capable of keeping a large database safe. I assume all medical and biographical information that exists is in the hands of the major state actors.

China hacked 22.1 million records of US government employees:

https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Manag...


Replies

coldpietoday at 9:15 PM

It is unthinkable to me that anyone believes there is such a thing as computer security after so many years of nonstop hacks and leaks. If you have a computer and it is connected to a network with access to the Internet, assume that computer is semi-public. Meaning, if someone was interested enough in accessing your computer, they could do it. Do not hook any computer with access to anything that would be devastating if it was made public to the Internet. Do not put anything that would be devastating if it was made public onto someone else's Internet-connected computers.

For example, do not hook your goddamn water or traffic or electricity infrastructure up to the goddamn Internet, and then, do fire the guy who suggested it.

The correct analogy for computer security is not locks and keys and doors and gates. It is a house in a floodplain. Your house will not survive the flood of it hits you. Do not store anything critical or irreplaceable in that house.

show 7 replies
titzertoday at 9:09 PM

And the city wonders why I don't want to put my credit card info in their crappy parking app and would instead prefer to put a quarter into the meter for 30 mins.

show 2 replies
clickety_clacktoday at 10:12 PM

This can’t be true. There’s no way the lowest bid contractor would build something with security gaps.

Taektoday at 9:00 PM

Google seems capable

show 2 replies
primitivesuavetoday at 9:34 PM

The recent Epic vs Health Gorilla lawsuit is an example of how your medical records have almost certainly made it to the hands of many people you will never know about.

tdhz77today at 9:03 PM

Mythos can do much worse

ChosenEndtoday at 9:12 PM

Mythos can hack 200 million government employees

simurtoday at 9:12 PM

Yeah, about the medical information. Recently in Poland there was a hack on the medical system called MyDr that is used by commercial medical facilities. Estimated 21M people could've been affected. So it is already happening and the scariest thing is, we don't have control on where our data is stored on. Even the EU GDPR didn't make it easy to control what data lands where.

kakaciktoday at 9:21 PM

banks still largely do... if they lose this fight, society has a problem