Hacker News Reader

Comment by turquoisevar | Hacker News Reader

They had no issue making MFA mandatory after the fact, so they should’ve had no issues making it mandatory before the fact.

> After disclosing the breach, 23andMe reset all customer passwords, and then required all customers to use multi-factor authentication, which was only optional before the breach.

As others have pointed out, there are also other options. Such as an email challenge when noticing high traffic, or damn, even when noticing a new login from a new device or IP that is unfamiliar. Many services do this all the time.

We’re talking about raw DNA data here that is accessible. You’d expect levels of security as implemented by banks if not better, not “Little Timmy’s first blog” levels of carelessness.

View on HN

> We’re talking about raw DNA data here that is accessible

No, we’re not. Have you ever used 23andMe before?

Yes we are and yes I have. Have you?

They’ve temporary disabled it due to this data breach, but you were able to download your raw data[0] and then use it as you see fit.

I, for example, downloaded mine and used OSGenome[1] to crawl through it and parse it as well as Promethease[2].

So maybe save your downvote next time until you know what you’re talking about.

0: https://ibb.co/yQc9xXP

1: https://github.com/mentatpsi/OSGenome

2: https://promethease.com

For starters, I didn't downvote you and couldn't even if I wanted to since HN doesn't allow you to downvote replies to your own comments.

For another, I got the threads confused and thought you were talking about the accounts that shared access with compromised accounts. Sorry. Relax yourself before you jump to immediately into your persecution complex.

> For starters, I didn't downvote you and couldn't even if I wanted to since HN doesn't allow you to downvote replies to your own comments.

Fair point.

> For another, I got the threads confused and thought you were talking about the accounts that shared access with compromised accounts. Sorry. Relax yourself before you jump to immediately into your persecution complex.

Apology accepted. Perhaps it might be wise to dial the snark down a bit, regardless of if you’re confusing threads or not. It ads little to the discussion at hand and only elicits replies with a similar tone.

You probably won't answer this now since it's so much later but can you point out where I was snarky? I'm being absolutely serious here because I don't understand where I was snarky to where you jumped to "So maybe save your downvote next time until you know what you’re talking about." Just trying to avoid the immediate escalation in the future and maybe I'm being aggressive and not knowing it?

Reply on news.ycombinator.com