News for hackers. Stuff that matters.
Re:50M Facebook profiles harvested for Cambridge Analytica i... by matt4077 on Saturday March 17, 2018 @02:01PM (#16608176)
It’s really easy: you pass laws.

Look at health records. HIPAA is rather successful at keeping your health data narrowly confined to those that need it. There is nothing that prevents similar laws to work for financial data, location data, etc.

The only roadblock is people saying they “don’t personally think legislation is the answer”. Because there is literally nothing but law that can have an effect.

Re:50M Facebook profiles harvested for Cambridge Analytica i... by Spooky23 on Saturday March 17, 2018 @02:36PM (#16608336)
Good law is hard. HIPPA prevents gossip. That’s about it.

The sales director for a drug manufacturer knows that you’ve filled a prescription before the claim is filed.

Enfamil and Gerber knew the estimated due date of our baby — although the only interaction we had with anyone was a miscarriage at 8 weeks and a near fatal complication.

Re:50M Facebook profiles harvested for Cambridge Analytica i... by heavenlyhash on Sunday March 18, 2018 @03:14AM (#16610805)
> HIPPA prevents gossip. That’s about it.

I agree that HIPPA is technically very weak.

But let's also agree that preventing gossip about private health info is a good thing -- a definite step in the right direction.

Laws are about building and reinforcing the culture we want to build. In that light, HIPPA is a long way from a failure: it sets the standard that "health care privacy is to be taken seriously, and as a society we believe it is important enough to legislate", if nothing else.

Re:50M Facebook profiles harvested for Cambridge Analytica i... by llukas on Saturday March 17, 2018 @11:20PM (#16610344)
https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...

Are you sure it wasnt something like this?

Re:50M Facebook profiles harvested for Cambridge Analytica i... by x0x0 on Saturday March 17, 2018 @05:37PM (#16609197)
That can be regulated. That the US chooses not to do so doesn't mean it cannot be done.

See, for example, GDPR.