Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Blaze (he/him) ( Blaze@lemmy.zip )  to Security News@infosec.pubEnglish · 3 years ago

15M Trello accounts have been leaked

lemy.lol

message-square
14
link
fedilink
25

15M Trello accounts have been leaked

lemy.lol

Blaze (he/him) ( Blaze@lemmy.zip )  to Security News@infosec.pubEnglish · 3 years ago
message-square
14
link
fedilink

cross-posted from: https://lemy.lol/post/18411383

I just got the email from haveibeenpwned. F Trello.

alert-triangle
You must log in or # to comment.
  • HeartyBeast ( HeartyBeast@kbin.social ) 
    link
    fedilink
    arrow-up
    12
    ·
    edit-2
    3 years ago

    Thanks for the heads-up, I’ve just changed my password

    Edit - Duh, passwords weren’t actually leaked - the ttackers queried Trello with email addresses and got back names, usernames and if the addresses were valid.

  • EmperorHenry ( EmperorHenry@infosec.pub ) 
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 years ago

    remind me again how digital IDs are going to make us safer when every company with people’s personal details is constantly getting hacked?

    • ComradeKhoumrag ( ComradeKhoumrag@infosec.pub ) 
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 years ago

      Centralized or decentralized digital ID?

      • EmperorHenry ( EmperorHenry@infosec.pub ) 
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 years ago

        Neither! They’re both a bad idea.

        • ComradeKhoumrag ( ComradeKhoumrag@infosec.pub ) 
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 years ago

          If it’s decentralized, you’re original point about companies being able to get hacked doesn’t apply anymore

          • EmperorHenry ( EmperorHenry@infosec.pub ) 
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 years ago

            Digital IDs are still horrible.

            • ComradeKhoumrag ( ComradeKhoumrag@infosec.pub ) 
              link
              fedilink
              English
              arrow-up
              2
              ·
              3 years ago

              The current ID system we have - social security numbers - are infinitely worse. Add 1 to it and it’s another valid SSN. Most of the numbers can be determined with regional info

              • EmperorHenry ( EmperorHenry@infosec.pub ) 
                link
                fedilink
                English
                arrow-up
                1
                ·
                3 years ago

                I don’t know who’s paying you and all the others to say that shit, but digital IDs aren’t about keeping anything safe, it’s about controlling the population and locking them out of society when they misbehave. If you make any political statement that rocks the boat you don’t exist anymore. If you become a whistleblower, you don’t have any freedom anymore. If you do anything at all that the oligarchs don’t want you to do, you’re not a person anymore.

                • ComradeKhoumrag ( ComradeKhoumrag@infosec.pub ) 
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  3 years ago

                  No one’s paying me anything, and I’m well informed of the civil liberty issues surrounding government IDs in general, let alone digital or paper.

                  What I am referencing is decentralized digital ID. There is no ominous they or third party who could control you with a decentralized digital ID. We already have a pretty shitty ID system, but a better ID system with less centralized control can exist

                • furysama ( furysama@mastodon.straylight.engineering ) 
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  3 years ago

                  @EmperorHenry do… Do you think you’re somehow immune to this today? People who piss off the powers that be today are silenced pretty effectively. Nobody needs any digital ID infrastructure to do that.

  • infinitevalence ( infinitevalence@discuss.online ) 
    link
    fedilink
    English
    arrow-up
    7
    ·
    3 years ago

    Well I deleted my account today so good job I guess.

Security News@infosec.pub

securitynews@infosec.pub

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !securitynews@infosec.pub
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 2 users / day
  • 1 user / week
  • 1 user / month
  • 1 user / 6 months
  • 93 local subscribers
  • 4.21K subscribers
  • 154 Posts
  • 122 Comments
  • Modlog
  • mods:
  • jerry ( jerry@infosec.pub ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code