Top
Best
New

Posted by robtherobber 12 hours ago

French government agency confirms breach as hacker offers to sell data(www.bleepingcomputer.com)
363 points | 122 commentspage 3
yubblegum 11 hours ago|
This shit should be stored encrypted not in plaintext.
jonathanstrange 10 hours ago|
The attacker will then simply use the decryption key to decrypt it.
yubblegum 10 hours ago||
Then the headline would be French goverment loses encryption keys ..
zh_code 12 hours ago||
Use Mythos!
shevy-java 11 hours ago||
Governments may just be incompetent. Still, the lobbyists will never give up for mandatory age verification in the future.
BrandoElFollito 9 hours ago||
It's nothing special. Our data goes away on a regular basis.

They hack the taxes and the heath insurance system and yhay have everything about us.

What a shitty world because of these idiots

SilverElfin 12 hours ago||
Yet another example why NO ONE should trust age verification laws or companies like Anthropic forcing you to verify identity with shady companies like Persona (https://news.ycombinator.com/item?id=47872608). Whatever info you give up, it’ll be exposed one day.
buttersicle 12 hours ago||
[dead]
abernard1 12 hours ago||
[dead]
Zealotux 12 hours ago|
Great, now scammers can steal my identity directly from the government. I hope they release a tool to check if I'm impacted or at least email me about it.
Avamander 12 hours ago||
Why would those pieces of data (DOB, full name, address) ever be sufficient for identity theft?

If that's sufficient to achieve anything then those systems are built on top of hopes and dreams.

rationalist 11 hours ago|||
It's good enough for health insurance fraud.

Edit: does someone not realize that many (all?) the doctors and hospitals use to verify you is your name and date of birth (in the U.S. - although I suppose that's why since this breach happened elsewhere)?

tomjen3 11 hours ago|||
Because the world is run by people who don't know anything, but have to pretend they know everything, so they can't ask those of us who have some idea about how IT security works.
john_strinlai 12 hours ago|||
>I hope they release a tool to check if I'm impacted or at least email me about it.

"ANTS stated that it is currently in the process of notifying those identified as impacted."

realusername 12 hours ago|||
With the number of leaks the French administration had everywhere, you don't need a tool, you are guaranteed to be impacted.
psychoslave 11 hours ago||
"Our government successfully achieved wide distribution of valuable assets in the era of digital information."
doublerabbit 12 hours ago|||
Alternatively, hackers can now be used as a method of age identification.
Oras 12 hours ago||
are govs required to comply with GDPR and data breaches laws?
nxm 12 hours ago|||
Yes, but unelected bureaucrats only impose fines on the private sector.
nick486 12 hours ago|||
what would be the point of the government fining itself though?

Now that I'm thinking of it, it would create the need for an extra gaggle of bureaucrats to oversee the process,so I suppose someone might see a point to it ...

vladvasiliu 11 hours ago||
You may think you're funny or something, but boy do I have news for you.

There absolutely are fines for French administrations. And, knowing the French tax system, they've probably found a way to levy VAT and some other taxes on top of those fines.

whyagaindavid 11 hours ago|||
Do you mean fines for tiny companies?
infamouscow 12 hours ago|||
There are carve-outs to allow for governments to make exceptions, but it's besides the point.

If the government were to hold themselves to account, they would fine themselves some amount N, and pay itself N using your taxes. It also wastes other finite resources for all the paperwork and legal action involved that could be used for something else.

Speaking pragmatically, there's no point trying to hold the government itself to it's own laws. The only time citizens do hold the government accountable, it's always done in the form of hangings, or the guillotine in France's case.