And that's exactly what people were worried might happen.
this post was submitted on 06 Oct 2023
381 points (97.0% liked)
World News
31460 readers
1353 users here now
News from around the world!
Rules:
-
Please only post links to actual news sources, no tabloid sites, etc
-
No NSFW content
-
No hate speech, bigotry, propaganda, etc
founded 4 years ago
MODERATORS
This was incredibly predictable
But they promised!
If people were actually taught history they would have known exactly what their genetic information being in a registry would result in.
Ooof.
IBM and the Holocaust by Edwin Black should be standard reading for high school students.
I can't believe people voluntarily sent them their DNA.
The worst part is it you have enough family members who used these services your details are likely on there too.
Though if neither a father nor his sons have submitted their DNA, the service will lack all that Y-DNA though, right? I'm glad I made the right decision to not send in my DNA to those sites, despite my sisters hounding me to do it after our dad refused, lol.
It's a shame though, because family genetic networking is interesting, but it just goes to show you can't trust these companies. (Even though the company didn't really do anything truly wrong in this case, as it's simply users reusing passwords, they still should have been better/more proactive especially with such sensitive information)
Even though the company didn’t really do anything truly wrong in this case, as it’s simply users reusing passwords, they still should have been better/more proactive especially with such sensitive information
There's nothing special or new or unique or unforseen about the security requirements of 23andMe.
They absolutely failed to implement an appropriate level of security measures for their service.
Mandatory 2FA could've prevented this.
Part of the issue is the average person using a service like this, and people comfortable with MFA don’t really overlap.
I mean, too bad. You're accessing the results of your genetic data that contain sensitive personal information on relatives as well as yourself. Banks require 2FA, and people figure out how to use that.
Y chromosomes have very little information on them, and the DNA there is pretty highly conserved. You're not really keeping any secrets by hiding your Y chromosome away.
It's not really like they are storing DNA sequences anyways. They use a genotyping array which just reads ~650k single nucleotide polymorphisms (SNPs).
An analogy would be 23andme has a 6.4mil page book of DNA for a single customer but they only know the position and letter of single character on every tenth page. Sure it's enough to identify someone (You can confidently use 50 SNPs to identify these days) but it's not like 23andme was ever storing a whole genome
They also sent your DNA involuntarily. You can be IDed of someone in your genetic vicinity has sent theirs. They don't even need to be super close.
I sent mine in because 75% of my DNA comes from sources unknown to me. It's been interesting seeing what pops up.
I'd do mine if I had some spare money, because I'm in the exact same boat. 75% unknown.
Someone help my dumb brain: what does that situation look like?
You only know your mother or father and one of their parents and have no idea of the three other grandparents?
Yes.
Top notch victim blaming you got there...
ETA because I don't engage with bigots:
Imagine that, the descendants of one of the biggest genocides in history want to try and piece their history together, and use the available tools to do it with, fucking shocker..
Then, when they continue getting targeted just for existing, privileged ignorant bigots who couldn't even imagine what having over 90% of their community gassed is like, and have never been oppressed for who they are a day in their lives, simply can't help themselves but jump to justify them being attacked again:
tHe bAstArDs dEseRve eVerYthInG tHey GeT!!11
And somehow not a word about the attackers, nor the company that failed its customers.
Sure, antisemitic Jan..🙄🙄🙄
"I can't believe this incredibly obvious thing happened!" Isn't really victim blaming, is it? They're not saying they did it to themselves or they deserved it, they're saying that this was bound to happen and people volunteered their DNA to a private company
Thanks!
load more comments
(1 replies)
load more comments
(5 replies)
Thank you!
The company said its systems were not breached and that attackers gathered the data by guessing the login credentials of a group of users and then scraping more people’s information from a feature known as DNA Relatives.
The information does not appear to include actual, raw genetic data.
This doesn't absolve them of anything. If you see thousands of accounts being individually logged in from the same block of IP addresses, and those users have never logged in from there before. That should raise red flags. No, Fred from California shouldn't be logging in from a vpn based out of Ireland right after Anne from NY logged in from that same VPN from Ireland.
Users are dumb. This is why there's tools to track odd behavior and clamp down on it.
"This doesn't absolve them of anything"
Of course it does. "Security" based on behaviour tracking is not the expected default like you are making it to be. (neither should it be.)
load more comments
(15 replies)
And people wonder why I’m paranoid about privacy…
This is why you don't reuse passwords
a lot of people in these comments who live in privacy-conscious bubbles and aren’t very familiar with “normal” people
there's also this attitude that certain users never did anything wrong. YouSureAboutThat.jpg
They never signed up for anything that compromised their privacy?
Also, we all live in abodes with wooden doors and glass windows that anyone with a rock or a stick can break into. Doesn't mean we deserve to be murdered in our sleep.
The fact that big companies collect and sell your data is common knowledge now, definitely not something esoteric that only people in privacy-conscious bubbles know of. However, "normal" people refuse to not follow every trend or get inconvenienced.
load more comments
(1 replies)
The full picture of why the data was stolen, how much more the attackers have, and whether it is actually focused entirely on Ashkenazim is still unclear.
From the article. Way to sensationalize a title...
My uncle tried to get me to do this for his family tree project.
Super happy I didn't cave to his persistence.
Wonder what the angle of targeting Jews is here? Are they trying to figure out why they've got stomach issues or something?
Wonder what the angle of targeting Jews is here?
…are you seriously asking? I can’t figure out if you’re trolling here. I’m going to go out on a limb and guess it wasn’t breached by a group of geneticists looking to cure Tay-Sachs.
I mean, targeting jews is obvious, no? Some racial purity freaks are trying to target the genetic root of a minority group.
23andMe basically drafted up a list of as many jewish descendants as they could get, which means the lunatics can use it as an easy list of targets.
Heres hoping the fuckers get caught before they can do anything with the data.
load more comments
(5 replies)
There's a whole conspiracy regarding Covid that RFK Jr. is blathering about. Supposedly this data breach targeted Jews and Chinese folks. I'm assuming that it's related in some way, but it's not clear how.
I am a 23andMe user, and yes I voluntarily sent them my DNA sample. Shit on me all you want. You probably don't have to live with multiple genetic conditions, chronic illnesses, and have a family history of several more.
Must be nice to be privileged with a healthy body and to get to care about privacy concerns instead wondering which genetic condition you'll die of first.
ITT: People who have never experienced medical gaslighting before. Think about the relevance of your experiences before commenting. ITT: People who don't live with chronic ille
I think you are also cursed with the gene that makes you a dick.
Obviously there's good and bad reasons to get tested.
The point is to be more mindful of who you share your data with. It's to protect yourself, not to make you feel like a fool.
load more comments
(1 replies)
load more comments
(11 replies)
view more: next ›