Humanity has risen!
Arcane
It should be a law: you compromise someone's name and address, you owe them 6 years of real time credit monitoring.
"Credit monitoring" does shit.
What should be done is let anyone who MAY be a victim from such a breech freeze their credit with the same ease someone who actually has been effected can.
http://arstechnica.com/tech-policy/...d-2-3-daily-tips-to-fbi-for-at-least-3-years/On Wednesday night, law enforcement officials contacted Kickstarter and alerted us that hackers had sought and gained unauthorized access to some of our customers' data.
What? How on Earth are law enforcement the ones to find out first?
Anyone using the Internet to perform any sort of interaction using their real name and address should realize that their information WILL be obtained just as it can from a phone book. On the heels of a breach people may want to put a watch on their credit, reset their password at KS (and anywhere else they may have used it) and never use that password again. Other than that, nothing is obtained that cannot be obtained or has already been obtained. Further, if a retailer chooses to issue credit with insufficient checks that is their problem entirely. I have zero fear of fraudulent activity because I know what my responsibilities and credit issuer responsibilities are.Doofuses like these who are careless enough to let their customers data leaked need to be hit with onerous class action lawsuits and be forced to cover real-time credit analysis for years. They'll think twice about skimping on security.
Actually considering only password hashes were taken and no card information, recovering so quickly is solid. That is if the disclosure is full. It could have been.much worse and all things considered I suspect they can demonstrate substantive measures taken and enacted in quick fashion.
For the people who have had their name, address, etc taken, there is no defense against it, and it can get them victimized through identity theft.
And of course those who had their e-mail address stolen will receive a mountain of spam and nigerian scams.
cboyardee and Vault Dweller will both have male escorts sent to their houses
If someone can steal your identity knowing only your name and address, you're fucked no matter what you do. That is generally considered to be public information, unless you have a specific reason to be living in hiding. I don't think kickstarter knows anything about me that isn't also in the phone book.Fraudulent activity on a credit card is trivial, you won't be held liable for it. Identity theft, on the other hand, can be like having a sword of Damocles dangling over yourself. Especially since most places only ask for shockingly little info to check your identity, and phone clerks can be easily social engineered.
If someone can steal your identity knowing only your name and address, you're fucked no matter what you do. That is generally considered to be public information, unless you have a specific reason to be living in hiding. I don't think kickstarter knows anything about me that isn't also in the phone book.Fraudulent activity on a credit card is trivial, you won't be held liable for it. Identity theft, on the other hand, can be like having a sword of Damocles dangling over yourself. Especially since most places only ask for shockingly little info to check your identity, and phone clerks can be easily social engineered.
If someone can steal your identity knowing only your name and address, you're fucked no matter what you do. That is generally considered to be public information, unless you have a specific reason to be living in hiding. I don't think kickstarter knows anything about me that isn't also in the phone book.Fraudulent activity on a credit card is trivial, you won't be held liable for it. Identity theft, on the other hand, can be like having a sword of Damocles dangling over yourself. Especially since most places only ask for shockingly little info to check your identity, and phone clerks can be easily social engineered.
Let's play:
- any Internet shop
- pizza's delivery
- post office
- school or university
- work place
- taxi
- neighbors
- any local self government
- actually a government
- hospital or any other medical thing
- friends and acquittances
- mobile operator
- Internet operator
- electricity operator
- gas operator
- bank
- many Internet sites track user whereabouts
- from social sites (localizing places of photos taken, where friends live, where the favorites places like restaurants, cinemas are)
- any customer/discount card or whatever is it called
- in some cases police or firefighters
- any kind of a local institution which store any estate rights documents
- maybe sport club or any other club one is a member of
- maybe some religious institution
- business card
You're confusing a freeze with a fraud alert. You have to call and wait for credit to thaw before applying for credit when frozen.
http://arstechnica.com/tech-policy/...d-2-3-daily-tips-to-fbi-for-at-least-3-years/
the "advantages" of spying on virtually everybody with some electronic device capable of communication...
can be like having a sword of Damocles dangling over yourself
LastPass is the best one in my opinion. Haven't tried 1Password. KeePass is good too but its browser integration is weak and it relies on you storing your database locally rather than online.I use a variety of passwords, but now it's time to probably use a manager.
Anybody have recommendations/feedback on 1Password, LastPass, keepass, or other similar services?
If someone can steal your identity knowing only your name and address, you're fucked no matter what you do. That is generally considered to be public information, unless you have a specific reason to be living in hiding. I don't think kickstarter knows anything about me that isn't also in the phone book.Fraudulent activity on a credit card is trivial, you won't be held liable for it. Identity theft, on the other hand, can be like having a sword of Damocles dangling over yourself. Especially since most places only ask for shockingly little info to check your identity, and phone clerks can be easily social engineered.
Let's play:
- any Internet shop
- pizza's delivery
- post office
- school or university
- work place
- taxi
- neighbors
- any local self government
- actually a government
- hospital or any other medical thing
- friends and acquittances
- mobile operator
- Internet operator
- electricity operator
- gas operator
- bank
- many Internet sites track user whereabouts
- from social sites (localizing places of photos taken, where friends live, where the favorites places like restaurants, cinemas are)
- any customer/discount card or whatever is it called
- in some cases police or firefighters
- any kind of a local institution which store any estate rights documents
- maybe sport club or any other club one is a member of
- maybe some religious institution
- business card
Exactly. It's very easy to gather data about you, and you're only as good as the weakest link in all of these operations. The clerk at minimum wage who flat out doesn't care.
You're confusing a freeze with a fraud alert. You have to call and wait for credit to thaw before applying for credit when frozen.
This is only available in the US from what I can see.
And it's too big an hassle anyway, there's too many services where you need a credit check in order to proceed ahead.
You're confusing a freeze with a fraud alert. You have to call and wait for credit to thaw before applying for credit when frozen.
This is only available in the US from what I can see.
And it's too big an hassle anyway, there's too many services where you need a credit check in order to proceed ahead.
http://lmgtfy.com/?q=canada add fraud alert
If someone can steal your identity knowing only your name and address, you're fucked no matter what you do. That is generally considered to be public information, unless you have a specific reason to be living in hiding. I don't think kickstarter knows anything about me that isn't also in the phone book.Fraudulent activity on a credit card is trivial, you won't be held liable for it. Identity theft, on the other hand, can be like having a sword of Damocles dangling over yourself. Especially since most places only ask for shockingly little info to check your identity, and phone clerks can be easily social engineered.
Let's play:
- any Internet shop
- pizza's delivery
- post office
- school or university
- work place
- taxi
- neighbors
- any local self government
- actually a government
- hospital or any other medical thing
- friends and acquittances
- mobile operator
- Internet operator
- electricity operator
- gas operator
- bank
- many Internet sites track user whereabouts
- from social sites (localizing places of photos taken, where friends live, where the favorites places like restaurants, cinemas are)
- any customer/discount card or whatever is it called
- in some cases police or firefighters
- any kind of a local institution which store any estate rights documents
- maybe sport club or any other club one is a member of
- maybe some religious institution
- business card
Exactly. It's very easy to gather data about you, and you're only as good as the weakest link in all of these operations. The clerk at minimum wage who flat out doesn't care.
The weakest link is you yourself. You have freely given this information out hundreds or thousands of times. Your information is out there and you cannot stop it unless you vow to be a hermit and only ever pay in person and in cash.