Hacker News Reader

Comment by surume | Hacker News Reader

"Identity thieves have been exploiting a glaring security weakness in the website of Experian"

Shouldn't Experian have been thoroughly audited by the gov't after the last major data breach? The above sounds pretty out in the open, no?

View on HN

> Shouldn't Experian have been thoroughly audited by the gov't after the last major data breach?

That sounds pretty unconstitutional. Why would the USG audit a private company for security?

It seems like it'd be a national security issue at the very least. Those databases also contain an up-to-date financial picture of government employees holding security clearances. Even if clearance holders are nominally supposed to remain above-board and unsusceptible, I'm willing to bet that enough data mining would allow decent targeting. The DoD is already monitoring those employee's credit reports, so clearly there must be something actionable in them and it's quite likely they miss something.

Which part of the Constitution is violated by the government scanning a website's publicly-available, advertised resources on the clearnet?

Unconstitutional just means it's not in the constitution. My claim is that nowhere in the constitution does it require the USG to audit a private company for security (especially in conjunction with an after major data breach clause).

Yeah, I guess that ensuring foreign actors can't publicly dump massive amounts of data on an arbitrary number of american citizens to be used in economic warfare definitely doesn't fall under any mandates that the US government has...

Yeah, if it did you would've quoted it.

Reply on news.ycombinator.com