Conversation

Notices

1. Embed this notice
   🅰🅻🅸🅲🅴 (🗑️🔥) (alice_watson@infosec.exchange)'s status on Saturday, 24-Aug-2024 00:45:47 JST 🅰🅻🅸🅲🅴 (🗑️🔥)

   What the actual fuck?! Data brokers are scum.

   """
   Another National Public Data company found hosting a file online that included the usernames and passwords for the back-end of its website, including for the site’s administrator.

   The publicly-accessible file, which has now been taken offline, showed that all RecordsCheck users were given the same 6-character password with instructions to change that password. Which many failed to do.
   """

   https://www.malwarebytes.com/blog/news/2024/08/national-public-data-leaked-passwords-online

   #NPD #DataBreach #DataBrokers

   • Bill repeated this.
   • Embed this notice
     🅰🅻🅸🅲🅴 (🗑️🔥) (alice_watson@infosec.exchange)'s status on Tuesday, 17-Sep-2024 02:32:58 JST 🅰🅻🅸🅲🅴 (🗑️🔥)

     in reply to

     I know I'm late to the NPD-bashing party, but the complete disregard for other's privacy they've shown warrants another go at them.

     The fact that these companies buy, scrape, and steal our data, then compile it into a dox-bomb and secure it behind a "do not breach k thx" high-security post-it note, just fucking riles me.

     And because it's "publicly available" data, the repercussions of any breach typically amount to having to write a whoopsie apology email and maybe offer an identity scraping—er protection—subscription.

     It blows my mind that these parasites are legal-ish businesses. They basically provide doxxing as a service.

     #NPD #Data #Breach #SecurityFail