SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber Theft

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by deft on Thursday April 26, 2018 @04:58PM (#16935702)

Hundreds of millions of users had their data stolen. Putting this fine at less than a dollar per user. Is that really what our private information and security is worth? Who cares if they're being fined when it's a slap on the wrist. To all those talking about billion dollar fines on Facebook: fat chance.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by mattnewton on Thursday April 26, 2018 @06:48PM (#16936657)

I mean, the crime here isn’t against users, it’s against investors right? That’s why the SEC involved. I don’t even know who enforces the meager consumer privacy protections we have these days.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by milkytron on Friday April 27, 2018 @01:05AM (#16938556)

> I don’t even know who enforces the meager consumer privacy protections we have these days.

Based on the fact that the ISPs lobbied to be able to sell browsing history... I don't think any government agency truly enforces consumer privacy protection.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by azurezyq on Thursday April 26, 2018 @05:04PM (#16935775)

FB's case is different. I think the term for FB's case is private data abuse rather than leak. Cambridge Analytica took the data through API just like every other app doing at the time, but violated the terms of use. FB is guilty because it designed the wrong way (no excuse) to share the information (still under consent). For example, banks share your personal info around all the time (say promo mails). For Yahoo, that's ... poor technology & management.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by deft on Thursday April 26, 2018 @05:16PM (#16935872)

you're making the case that Facebook was negligent and Yahoo wasn't. I don't think that's true because Yahoo kept the hack a secret from auditors and users for 3 years.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by utopcell on Thursday April 26, 2018 @09:48PM (#16937844)

Considering there was a foreign state agent involved in the hack, we should consider the possibility that Yahoo could not disclose the hack even if they wanted to.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by gnode on Friday April 27, 2018 @06:56AM (#16939780)

As this is the SEC, making a fine on behalf of investors, it reflects the impact to investors. That being, that unfortunately most users continue to use platforms in spite of serious security and/or privacy concerns. Combined with weak consumer protection, this makes the consequences for the company fairly minor.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by onetimemanytime on Friday April 27, 2018 @02:58AM (#16938912)

To be fair that's SEC, they deal with investor issues.

Not that FTC will hurt them more given their past penalties but...

IMO, the penalty should be xx% of their revenue. Customer data is sacred; unless you can secure it, don't ask for it.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by labster on Friday April 27, 2018 @05:28AM (#16939480)

Most users will give away their personal data for a discount of less than a dollar, sometimes even for free. So yeah, the market rate for our personal information is very low per person.

[ Parent | on HN ]

Re:SEC Penalizes Yahoo $35M for Massive, Undisclosed Cyber T... by matte_black on Thursday April 26, 2018 @10:22PM (#16938002)

A dollar is generous. The value of any individual user’s data is far simpler: worthless.

[ Parent | on HN ]