Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>until something goes significantly wrong

Data breaches are so common they don't even register any more, and people share far more personal information now (willingly or not) than they used to. Remember when the common advice was "don't use your real name online"? Now every service demands your phone number to register, and those temporary email services (like 10minutemail) rarely work any more, in my experience. Downtime makes the news if it's bad enough, but Cloudflare, Microsoft and Amazon still control most of the internet. They fuck up badly all the time, and nothing ever happens. Windows 11 is literal adware, and Linux desktop usage is still a rounding error.

Remember that Tea "dating" app that leaked pretty much everything last year? As far as I can tell, it's still in business.

Many such cases.





> Now every service demands your phone number to register

That appeared as a defense against people impersonating you, i.e. two factor authentication.


Weird that those same services don't send a login token to the registered number.

If that was the case then TOTP would be available as an alternative but often enough it isn't even though SMS are less secure and more costly to implement.

Equifax arguably shouldn’t still be in business…

And yet not long ago its stock was nearly triple that of the time of the 2017 breach…




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: