Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Steve Bellovin (stevebellovin@infosec.exchange)'s status on Thursday, 10-Apr-2025 01:11:52 JST Steve Bellovin

   Worth noting: combining different databases is generally regarded as the single most dangerous thing to do from a privacy perspective. Here's what Paul Ohm wrote a few years ago (https://hbr.org/2012/08/dont-build-a-database-of-ruin):

   In my work, I’ve argued that these databases will grow to connect every individual to at least one closely guarded secret. This might be a secret about a medical condition, family history, or personal preference. It is a secret that, if revealed, would cause more than embarrassment or shame; it would lead to serious, concrete, devastating harm. And these companies are combining their data stores, which will give rise to a single, massive database. I call this the Database of Ruin.
   https://flipboard.com/@newyorktimes/the-upshot-imovb8bqz/-/a-pvsZrW8uTLKxDaAmALYvXw%3Aa%3A3195393-%2F0