At least a million data points from 23andMe accounts appear to have been exposed on BreachForums. While the scale of the campaign is unknown, 23andMe says it’s working to verify the data.

  • fiat_lux@kbin.social
    link
    fedilink
    arrow-up
    21
    ·
    edit-2
    9 months ago

    All data is scrapable. It’s just a matter of how difficult it is to scrape and whether it’s worth the effort.

    Assume anything you see or input is being captured, because it almost always is, even if it’s just because WiFi can trace your physical outline, or a street camera saw you unlock your phone, or your fingerprint is can be copied from a door handle.

    The only place that data is mostly still secure is literally your brain, but even then, that can be compromised with a bottle of booze.

    how in the world did they not better safeguard and isolate user data?

    It’s realistically impossible to 100% do this, unfortunately. 20+ year old security flaws are discovered alarmingly frequently, and once the wrong person knows about the right exploit, they can automate entire global attacks. Automated attacks make up a lot of global internet traffic.

    Imagine there are physical medieval castles with moats with crocodiles and turrets and an entire defending army with ballistas… but doors randomly appear in the external walls, and bridges instantly construct over the moat, and entire sections of walls can disappear unexpectedly. When there is an infinitely replenishable enemy army attacking that castle, they’re going to get in eventually. That is what the internet is, but digitally.

    Humans write code, and humans aren’t perfect, so neither is their code. And anything Humans make or do, a different human will try to destroy or exploit it, that is guaranteed. It’s a problem we’ve had for as long as we’ve been organisms.