Comment by philh on 14/12/2006 at 22:31 UTC

-2 upvotes, 1 direct replies (showing 1)

View submission: Reddit's Streak of Bad Luck Continues...

View parent comment

From the response it sounds like this is be true, but how did you infer it? It's not like hashing makes your password impregnable, just more time-consuming to crack - and dictionary attacks are most effective when you have a long list to check against.

What would be really worrying is if they hashed, and then decided that that made it okay not to inform us.

Replies

Comment by redditacct at 15/12/2006 at 01:21 UTC

4 upvotes, 1 direct replies

In California, break ins and data theft at businesses (not sure about non- business accounts) are required to be reported to California residents. That law is the only reason (in many cases) that we even heard about data loss, etc - prior to that law, businesses had no reason to disclose these incidents. In fact, in some cases businesses were only notifying their California residents affected by a data theft until they were called out on it and then said, "Oh, yeah - We'll notify the people in other states, too" IANAL, etc.

I think we need an ammendment that says individuals own (and have copyright rights to) their personal info, their DNA and their other physical and electromagnetic (brainwaves, EKGs, etc) properties.

What if someone lost a disk with private information about a bunch of our corporate citizens? They'd be strung up immediately. These clowns (corps, not reddit) own and profit from owning our personal info.