44
15M Trello accounts have been leaked (lemy.lol)
submitted 2 years ago by to c/securitynews@infosec.pub
14 comments fedilink hide all child comments
 

cross-posted from: https://lemy.lol/post/18411383

I just got the email from haveibeenpwned. F Trello.

all 14 comments

sorted by: hot top controversial new old
[–] 11 points 2 years ago* (last edited 2 years ago)

Thanks for the heads-up, I've just changed my password

Edit - Duh, passwords weren't actually leaked - the ttackers queried Trello with email addresses and got back names, usernames and if the addresses were valid.

  • permalink
  • fedilink
  • source
    •
    [–] 8 points 2 years ago

    Well I deleted my account today so good job I guess.

  • permalink
  • fedilink
  • source
    •
    [–] 7 points 2 years ago (11 children)

    remind me again how digital IDs are going to make us safer when every company with people's personal details is constantly getting hacked?

  • permalink
  • fedilink
  • source
  • hideshow 11 child comments
    •
  • [–] 1 point 2 years ago (10 children)

    Centralized or decentralized digital ID?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 0 points 2 years ago (9 children)

    Neither! They're both a bad idea.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 0 points 2 years ago (8 children)

    If it's decentralized, you're original point about companies being able to get hacked doesn't apply anymore

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 0 points 2 years ago (7 children)

    Digital IDs are still horrible.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 1 point 2 years ago (6 children)

    The current ID system we have - social security numbers - are infinitely worse. Add 1 to it and it's another valid SSN. Most of the numbers can be determined with regional info

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] -1 points 2 years ago (5 children)

    I don't know who's paying you and all the others to say that shit, but digital IDs aren't about keeping anything safe, it's about controlling the population and locking them out of society when they misbehave. If you make any political statement that rocks the boat you don't exist anymore. If you become a whistleblower, you don't have any freedom anymore. If you do anything at all that the oligarchs don't want you to do, you're not a person anymore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 0 points 2 years ago (3 children)

    No one's paying me anything, and I'm well informed of the civil liberty issues surrounding government IDs in general, let alone digital or paper.

    What I am referencing is decentralized digital ID. There is no ominous they or third party who could control you with a decentralized digital ID. We already have a pretty shitty ID system, but a better ID system with less centralized control can exist

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 2 years ago (2 children)

    digital IDs are still hackable, even if you have total control over your own, it's still hackable and it gets tracked everywhere you have to show it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Everything is hackable, even the current form of id we have which is SSN. Decentralized digital ID is orders of magnitude harder to hack, and has even less government control over the ID process. The expectation value to crack modern encryption is measured on eons even if you're using all the power in the sun and physically perfect efficiency in energy to computation conversion

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •