Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
cm0002 ( cm0002@infosec.pub )  to Privacy@programming.dev · 4 months ago

Nearly a million passports just exposed on the public internet—and anyone could access them with a simple URL

cambridgeanalytica.org

external-link
message-square
10
link
fedilink
  • cross-posted to:
  • privacy@lemmy.ml
41
external-link

Nearly a million passports just exposed on the public internet—and anyone could access them with a simple URL

cambridgeanalytica.org

cm0002 ( cm0002@infosec.pub )  to Privacy@programming.dev · 4 months ago
message-square
10
link
fedilink
  • cross-posted to:
  • privacy@lemmy.ml
Nearly one million passports and driver's licenses from multiple countries were left unprotected online with zero password protection. Here's what happened.
alert-triangle
You must log in or register to comment.
  • stoy ( stoy@lemmy.zip ) 
    link
    fedilink
    English
    arrow-up
    25
    ·
    4 months ago

    This is basically what happened here in Sweden, when millions of phone call recordings to our national medical help line, were found to be accessible on the internet because, and I quote the company responsible:

    “Someone plugged the internet cord into the hard drive”

    But they claimed that the dammage was minimal because, and I again quote from the company responsible:

    “You would need to perform a command movement to slip in through the back way”

    Which the company claimed would be impossible for a normal person.

    In truth, you would just need to enter the correct URL, and then get access.

    Both of these expressions were instantly made part of the Swedish IT lexicon as insanely funny and incompetent expressions.

    • Kairos ( LodeMike@lemmy.today ) 
      link
      fedilink
      arrow-up
      7
      ·
      edit-2
      4 months ago

      Who the fuck says that? It feels straight out of a network TV show from the 00s.

      • refalo ( refalo@programming.dev ) 
        link
        fedilink
        arrow-up
        6
        ·
        4 months ago

        someone who has no idea how networking and security works

      • stoy ( stoy@lemmy.zip ) 
        link
        fedilink
        English
        arrow-up
        4
        ·
        4 months ago

        The CEO of the company responsible.

        It was actually refreshing to not just get a pretty non-answer from a media trained press representative.

  • IanTwenty ( IanTwenty@piefed.social ) 
    link
    fedilink
    English
    arrow-up
    10
    ·
    4 months ago

    They really chose the domain ‘Cambridge Analytica’, named after the Facebook scandal?

    • refalo ( refalo@programming.dev ) 
      link
      fedilink
      arrow-up
      7
      ·
      4 months ago

      Is this not the exact same Cambridge Analytica? Wikipedia seems to say this is their domain.

      • IanTwenty ( IanTwenty@piefed.social ) 
        link
        fedilink
        English
        arrow-up
        3
        ·
        4 months ago

        Their legal notice https://cambridgeanalytica.org/legal-notice/ says

        The website cambridgeanalytica.org is published by Vortexlab Digital Marketing, a digital media and research-oriented publishing company headquartered in:

        Dubai Silicon Oasis, DDP, Building A1
        Dubai, United Arab Emirates

        So it seems like they’re a separate thing, but it’s confusing.

        Wikipedia says:

        (Cambidge Analytica) closed operations in 2018 due to backlash from the data scandal

    • ButtermilkBiscuit ( ButtermilkBiscuit@feddit.nl ) 
      link
      fedilink
      arrow-up
      5
      ·
      4 months ago

      First thing I noticed, wtf.

  • onlinepersona ( onlinepersona@programming.dev ) 
    link
    fedilink
    arrow-up
    3
    ·
    4 months ago

    Age verification laws are being suggested with absolutely no manner of remediation. If your details ate exposed because of crap like this, you will bear the brunt of the damage.

  • Marija ( Marija@programming.dev ) 
    link
    fedilink
    arrow-up
    1
    ·
    4 months ago

    That is terrifying. Definitely makes you want to pull back and figure out how to limit your digital footprint.

Privacy@programming.dev

privacy@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@programming.dev

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 35 users / day
  • 337 users / week
  • 1.55K users / month
  • 4.02K users / 6 months
  • 35 local subscribers
  • 5.46K subscribers
  • 2.01K Posts
  • 7.31K Comments
  • Modlog
  • mods:
  • Ategon ( Ategon@programming.dev ) 
  • danielintempesta ( danielintempesta@programming.dev ) 
  • BE: 0.19.21
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code