Hacker News Reader

Comment by nextworddev | Hacker News Reader

Microsoft (or any other FAANG) could leak all of our data, and not sure if it will face any real consequences. When was the last time a firm actually went "under" for a data security issue?

Some recent data security breaches: - Snowflake - AWS / Capital One

View on HN

Yes, I think everyone understands that leaks happen.

The problem being pointed out here is that you can't leak what you don't collect: this is a lot more data, and a lot more sensitive than what MS has ever collected before.

Snowflake has actually been fairly consistent on saying that the breach was not of their underlying systems, but customer misconfiguration. I am reminded of the mid 2010s when AWS had certain systems public by default and tons of "data breaches" involved companies simply not making their data buckets private.

"Our stupid customers didn't turn on the 'safety mode' which our customer support people often tell them to turn off" is such a reassuring PR tack.

If the default settings of a system are to make it public, then yes it is the "stupid customers'" fault for not clicking the check box to make it private.

Snowflake can't take the blame just because you went and dreamed up a scenario where customer support tells users to make their data public, then got mad at them for your imagination.

What we need are large, mandatory, fines for every data breach that happens. Say $10k to every person whose address gets leaked. Then we'll see companies start treating consumer data as a risk, not just a low -cost asset.

Some people want their location data pushed to the cloud https://news.ycombinator.com/item?id=40583946

Dont forget Equifax!

Reply on news.ycombinator.com