News for hackers. Stuff that matters.
Re:Yahoo Triples Estimate of Breached Accounts to 3B by stordoff on Tuesday October 03, 2017 @07:50PM (#15397215)
Wouldn't the emails themselves count as user information?
Re:Yahoo Triples Estimate of Breached Accounts to 3B by IncRnd on Wednesday October 04, 2017 @12:28AM (#15398254)
No. User information here means information denoting a user not information from a user.
Re:Yahoo Triples Estimate of Breached Accounts to 3B by freeflight on Wednesday October 04, 2017 @06:55AM (#15399551)
That's dangerous schematic games along the same lines of "Metadata is harmless and can't identify anybody".

Emails can sometimes contain very detailed and very denoting user information. Trying to differentiate between users "personal information" and users "personal content" is imho a rather dangerous thing to do because who decides where to draw the lines between the two?

As a user, I expect my data, regardless of which data, to stay private unless I explicitly intent to publish it to the public or somebody else. I most certainly do not expect some employees reading through my private emails for their lunch-break entertainment.

Re:Yahoo Triples Estimate of Breached Accounts to 3B by IncRnd on Wednesday October 04, 2017 @11:12AM (#15401023)
> That's dangerous schematic games along the same lines of "Metadata is harmless and can't identify anybody".

That's a complete strawman argument that has nothing to do with what I wrote. The distinction is correct and factual in this exact situation. You are attempting to redefine terms for apparently no reason other than to argue.

Whether emails contain detailed information or not is irrelevant to the term "user information" in this context, meaning information about a user. The discussion is about whether an email service requires personal information to operate.

> As a user, I expect my data, regardless of which data, to stay private unless I explicitly intent to publish it to the public or somebody else. I most certainly do not expect some employees reading through my private emails for their lunch-break entertainment.

In the real-world, you either need to change your expectations or encrypt your data.