News for hackers. Stuff that matters.
Re:Equifax IT staff had to rerun hackers' queries to work ou... by xevb3k on Wednesday September 19, 2018 @04:20PM (#18027386)
Interestingly (because the parent is about Schneier). IIRC Schneier argues against this.

The argument is that even if everybody has access to all information, only a small group is able to exploit that access effectively.

So, you still end up with a small group abusing their access to the information. You should therefore aim for privacy of sensitive information.

Re:Equifax IT staff had to rerun hackers' queries to work ou... by cortesoft on Wednesday September 19, 2018 @07:06PM (#18028377)
Yeah, I think a good example of this is thinking about something like license plate scanning.

Technically, this is not taking advantage of any public information. It is just capturing images of things happening in public. Anyone could set up a camera and capture license plates as they drive through an intersection.

So is it totally fine for a police force to scan license plates at every intersection?

The question is complicated, because the effect on people changes when you do something that is not worrisome on a small scale in an automated way at a large scale. When you add in that the people doing it have a large amount of power over people and it changes it even more.

Re:Equifax IT staff had to rerun hackers' queries to work ou... by komali2 on Wednesday September 19, 2018 @07:38PM (#18028523)
Well hold on, the difference there is the police can cross reference scanned plates against other databases the public doesn't have access to, yeah? Or is there some way to id plates against names? If there is I wanna know cause I wanna ID whoever knocked my motorcycle over
Re:Equifax IT staff had to rerun hackers' queries to work ou... by xevb3k on Wednesday September 19, 2018 @09:32PM (#18029074)
If you had near continuous location information for a license plate it would be relatively simple to use it to narrow it down to a small group of people.

I’d imagine it would be relatively easy to figure out where someone works and/or lives and just go find them.

Correlating across multiple public databases might make things even easier.

But I don’t think this is the point of the argument. The point is that those in power can gain more benefit from the information than the general population.

Let’s say all votes in elections become public. That information is more useful to a powerful political party than to the public at large, or a small unfunded group. If you don’t want that information abused, the argument goes, you should make sure it’s kept private.