Hacker News Reader

Comment by nominusllc | Hacker News Reader

I'm going to return and reflect on this comment after the breach.

You might but nobody else will. Another day another breach. Nobody cares about the firings and they surely won’t care about the breach.

I would even guess that for a large breach like the one T mobile had, most of their customers don’t know about it. And if they do the thing they care most about is trying to get their cash payment because “free money.”

I’m not saying that’s how it should be but that’s how it is. Companies make decisions every day that are bad for their customers and everyday unless the customers are majorly inconvenienced they simply don’t care. Or maybe I’m in a bad mood today and casting everything in a negative light. Or both.

You seem to be suffering cognitive bias and projecting a lot of your own personal feelings with the "nobody else will". Well, obviously this is being proven wrong with the public's reaction to this.

Is it a meaningful number of people? I couldn't say at present, but to talk in absolutes is silly.

It's pretty obviously a rhetorical 'nobody', really meaning, the overwhelming majority. Which I find to be quite accurate.

few days and a bigger layoff later and yup … no one cares. except the 2 people that closed their patroen accounts.

so now i have to think it’s a reasonable guess that a security team member found out early and even possibly leaked it, even if only internally like to their boss. to contain it the whole team had to suddenly be let go.

that’s beside the point. just a random theory. in this context, the point is that there’s been no follow up on the security layoff, no tie in with the larger story, so yeah no one cared

I can tell my comment moved you to say something, but I dont think you stopped to consider what you might say, only that you needed to say something.

Cassac is correct, no one cares. Snark won’t make you right.

Saying no one cares about breaches and security and the security and privacy of customer data is inaccurate.

If you don’t care go ahead and post your social security number in this thread.

How is a social security number relevant for a Patreon breach? Worst case, they would get your name, password, IP, billing address, subscription list, and, unlikely, your credit card info. I think this is what people are somewhat immune to.

For me, the password is unique, the name and billing address is public record, and my bank protects me from credit card fraud, since using one requires handing the number out multiple times a day. The only thing that bothers me is the IP address, but that was leaked in other breaches, once a few years ago, and twice this year. I think this is the same for most people.

You do have to put in your SSN at some point to get paid. It's stored with Stripe, but a hacker could prompt people to re-enter it for capture citing some issue. How many people are savvy enough to question that?

"Please upload a new W-9 to comply with new IRS requirements."

(Nevermind there are no new IRS requirements.)

I suppose anything is possible with a full takeover. I was referring to data breaches.

I consider all online accounts as breached. That is why I use unique passwords.

If my CC is compromised, i'll notice in my monthly statement and report the bad charges (this has happened twice in 10 years). ...once from using the card in eastern Europe and the 2nd time at a hospital recently.

Not using services online because you're afraid of a breach is highly inefficient.

Better to share as little as possible and have consistencies when there are breaches.

I generally do the same but go a little further. I use an anonaddy email address and a virtual card from privacy.com with limit. This way Patreon and their customers do not know who is funding these creators. A breach is also a negligible risk. Unfortunately, I am probably in the 1% of people who take these measures.

I'd like to think that my CC provider would flag any bad transactions as they happen, as most do.

They were breached once before (in 2015) and it didn't seem to have any meaningful impact on them.

They had a security staff back then.

Reply on news.ycombinator.com