Following Data Leak, HIV Dating App's Developers Threaten Infection (csoonline.com) 105
itwbennett writes: Sometime before November 29, the MongoDB housing the data of Hzone, a dating app for HIV-positive singles, was exposed to the Internet. The company, displeased with having the security incident disclosed, responded to an email notification from DataBreaches.net with this threat: "Why do you want to do this? What's your purpose? We are just a business for HIV people. If you want money from us, I believe you will be disappointed. And, I believe your illegal and stupid behavior will be notified by our HIV users and you and your concerns will be revenged by all of us. I suppose you and your family members don't want to get HIV from us? If you do, go ahead." Hzone later apologized for the threat.
Trading on tragedy (Score:3)
So...we've got a company that runs a business by trading on someone else's misfortune. Rather "ballsy" to go after the folks reporting the breach rather than focus on the fact that their customers are flapping in the breeze as a result of their incompetence. Replace HIV with "leprosy" or "cancer"....the result is the same.
Sad.
Re:Trading on tragedy (Score:4, Funny)
Following Data Leak, "Cancer" Dating App's Developers Threaten Infection
Ugh...
Re: (Score:3, Interesting)
Or, you know, its just a dating site for people with HIV. HIV patients are NOT lepers, and HIV is not necessarily terminal. You won't catch HIV from being in the presence, or even being intimate with , as long as unprotected sex isn't occuring.
Leprosy isn't necessarily terminal: in fact it's curable. Like HIV, it's contagious, but not easily so (though perhaps more easily than HIV). Funny thing, prejudice.
Re:Trading on tragedy (Score:5, Insightful)
Umm...cancer typically isn't the result of incompetence. In act, 65% of the time it's completely by chance [www.cbc.ca], meaning no action you took caused it, you just got unlucky. Leprosy isn't necessarily either, in fact it can spread by somebody coughing into their hand, touching a doorknob, and you coming up later and touching that same doorknob without ever seeing that person.
Furthermore, fulfilling an economic need isn't trading on someone else's misfortune. If it was, then restaurants would be trading on someones misfortune of being hungry.
Re: (Score:2)
Re: Trading on tragedy (Score:2)
Re: (Score:2)
Umm...cancer typically isn't the result of incompetence. In act, 65% of the time it's completely by chance, meaning no action you took caused it,
Your link says that 65% of the time it's caused by "random mutation", which means we don't know what caused it. Was it a cosmic ray? Something you ate? Some toxic perfume you wore? Some toxic perfume someone else wore? Something that leached into your bottled water, since all (yes, all) plastic bottles leach toxics into their contents over time? It doesn't support your assertion.
The article is inherently misleading since we never know what caused a cancer. We can crunch the numbers but we have to rely on st
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
Just because some people have misused statistics in the past doesn't mean that all statistics are bullshit. Try some re-education [bbc.co.uk].
Re: (Score:3)
Your link says that 65% of the time it's caused by "random mutation", which means we don't know what caused it. Was it a cosmic ray? Something you ate? Some toxic perfume you wore?
None of the above. afxgrin already answered this for you.
Something that leached into your bottled water, since all (yes, all) plastic bottles leach toxics into their contents over time? It doesn't support your assertion.
LOL, so now you're believing everything you read in those chain emails? Hate to piss in your cheerios, but those emails are chock full of urban myth:
http://www.cancer.org/aboutus/... [cancer.org]
Re: (Score:2)
Something that leached into your bottled water, since all (yes, all) plastic bottles leach toxics into their contents over time? It doesn't support your assertion.
LOL, so now you're believing everything you read in those chain emails? Hate to piss in your cheerios, but those emails are chock full of urban myth:
And then you proceed to link something which doesn't actually speak to my assertions. It addresses one chemical. It's also from the American Cancer Society, which makes it dubious on its own. They are Big Pharma whores. Guess what? There are multiple known carcinogens commonly used in plastic drinking water bottles, and they leach into their contents [npr.org]. The government insisted that BPA was safe [jsonline.com], and we saw how much bullshit that was. Now they're insisting that BPS and the rest of of this shit is safe, and you
Re: (Score:2)
If you're going to argue that everything you don't know about is dangerous, then you shouldn't ever eat anything again. Because by your argument, you might die from eating one of the hundreds of ingredients in a raw apple (or anything else) that you've never heard of and don't know what they do. Seriously, you're entire post is one big example of a logical fallacy:
https://en.wikipedia.org/wiki/... [wikipedia.org]
Re: (Score:2)
Oh, and pushing aside your really bad logical fallacy, as for your supposed link to cancer in water bottles, I think it's more likely that you'd get cancer from coffee. Why? Well coffee has over 36 known carcinogens in it (this includes natural/organic coffee.) KNOWN. Not this "fear of the unknown" shit you're appealing to.
Re: (Score:2)
I would say that the original response to DataBreach was probably shear ignorance. It was probably a response written by someone non-technical that doesn't understand that it wasn't DataBreach that did the deed, but rather they discovered and were notifying them.
Look at the way the HIV site reacted. Seems pretty clear that the original response was an angry/hurt reaction and the apology likely occurred after someone technical pointed out what was actually going on.
Admittedly, I didn't read the article, bu
Re:Trading on tragedy (Score:5, Funny)
I would say that the original response to DataBreach was probably shear ignorance.
Shear ignorance ... a truly cutting remark.
Re: (Score:2)
Re: (Score:1)
Probably for emos.
Re: (Score:3, Interesting)
I used to send notices to site admins that seem like they had been hijacked because on the requests/packets they were sending to my site. Why else would some public school site or not profit organization site try to brake into my systems unless they have been themselves compromised.
I stopped doing this because some site admins though I was the one hijacking them so now it is all for myself; don't try to help otherwise you may get in trouble.
Well, it silly but I guess this is how things work...
Re: (Score:2)
A bit OT but back in the 90s when dial-up was the norm I noticed the RX light on my modem flash every 10 seconds. I investigated and found that some random IP address was sending me pings. Back then I was using an Amiga and would respond to pings. Anyway, this annoyed me so I did a bit of port scanning on the source IP, found telnet was available and connected.
It seemed to be some kind of router OS, not BSD or Linux anyway. I could't find much info or a list of commands, but eventually found that RESET woul
Re: (Score:2)
Leave in peace ;-)
Re: (Score:2)
live ;-)
Re: (Score:2)
In my area, the first Internet providers aside from the Universities(/Army) were definitely using Linux. I am still using Slackware in prod systems in 2015 but this is just me.
This was about 10 years before banks that have said they would never go online went. It has been a turning point. After they did, it was now safe to make financial transactions using the Internet in the mind of the people.
Re: (Score:2)
A handful of butthurt site owners can hardly be compared to the entire HIV community.
Re: (Score:1)
At least it protects people from their kind. They keep infecting people that don't have it which is how it spreads. Those infected people are infecting others. If they would stop, AIDS would die off, but instead those people decided to keep infecting others.
Re: (Score:3)
My guess this that this made by HIV infected people as a service to others with the same condition, rather than a money making activity, so I don't think we can question the motives of the people providing this service as being exploitative.
However, they should have protected their users' information far better, given the special privacy requirements that their users have, especially in light of the recent Ashley Madison breeches. Blame is not a zero sum game, unless it's falling prey to a 0-day exploit in
Re: (Score:2)
You say that they run a dating site targeting HIV+ individuals like it's a bad thing. The reality is that the majority of HIV- people in the world are woefully under-educated about HIV and the ways it does (and does not) spread. This causes many HIV- people to refuse to date HIV+ people. In turn, many HIV+ people prefer to date other HIV+ people as they know their date won't reject them due to their serostatus.
Regarding incompetence, it's not always that way. Certainly in many cases it is, but I have a
Re: (Score:1)
So...we've got a company that runs a business by trading on someone else's misfortune.
Yeah like those bastards building wheelchairs and those god damned ambulance drivers. Get those capitalist sumbitches!!!
ffs it would be nice to go through an entire day without some dumbass activist babbling about something they know nothing about...
Wrong People to Fuck With... (Score:5, Funny)
Somebody picked the wrong people to fuck with...
Re: (Score:2, Funny)
Yeah, they might give you a virus.
Following Data Leak, HIV Dating App's Developers T (Score:3)
"Following Data Leak, HIV Dating App's Developers Threaten Infection"
Does the title even parse?
Re: (Score:3)
Does the title even parse?
Yes, but it won't make sense to you if you don't bother to read the summary. Point being that by allowing HIV patients to date each other means they won't be dating you so this site's existence means you're less likely to get infected.
Re: (Score:1)
Re: (Score:1)
Yes but apparently the HIV patients are also banding together to revenge-infect entire families, which is a cause for concern.
Not really. Unless you are one of the assholes that does that stuff.
I hope they do it. If the Internet (and computers in general) is characterized as simply, "a place of lack of consequences." This, at it's fundamental core, is wrong. Likewise, expecting it to work properly while letting people make up their own rules of behavior to use it is simply foolish.
If you are feeling the urge to get faggy about it, perhaps you should check your own behavior.
Maybe, someday, the guys that put bad people in c
Re: (Score:1)
So.... you think it's reasonable for an HIV infected individual to infect the entire family/families of an organization that notified them of a data breach even though they did not, in fact, perpetrate the breach? Because that's what they threatened to do. Man. You're a douchebag.
Re: (Score:3)
"Following Data Leak, HIV Dating App's Developers Threaten Infection"
Does the title even parse?
"Following {an event}, {subject} threatens {an act}." What's the issue?
Re: (Score:2)
Oh it parses, I too thought for a moment that "Infection" was computer oriented and the title makers were being cutesy. (In rather bad taste if you ask me). Because there was NO WAY that they'd threaten infection with HIV.
But no. It's ACTUALLY that horrible. That's a LITERAL headline. Holy shit, wtf, $[expletive-of-choice-here].
Re: (Score:3)
A dating app is not a covered entity under HIPAA. Covered entities include health plans, health care providers, and health care clearinghouses.
Re:For what purpose? (Score:5, Insightful)
There's legit whistle blowing, and then there's this... What was the point, to extort and harass ppl. with HIV?
You obviously didn't read their article, their point was to stop the leak. They didn't extort anyone. They just wanted the leak to stop (or at least the web site shut down).
This is a data breach for the sake of a data breach (and boosting the status of a cracker or group's ego - who is "anonymous" anyway, of course, so don't see the point -- ??).
Hackers? You're going a bit far.
This information was getting indexed by at least one commercial search engine. If the information is so easy to access that even a normal search engine has access to it. The web site has done something wrong and the person who found this out is probably not much of a hacker.
But if then, the web site refuses to fix the leak, nor shut down the web site, five days after you've notified them and been in communication with them. Then, there is something seriously wrong with the site. If I had been the person running the site, I would have shut down the web site immediately, period. There is no excuse. If you don't know how to fix it, that's fine, then please just shut down the site. It's better your site is down for a week, than all that data being exposed out there for that same week.
Furthermore since the web site owner is lying about the number of ip addresses having accessed that confidential data, I think they should be sued and shut down permanently by their users (or simply shut down by the authorities). This site provides a valuable service, but if they don't know what they're doing and they're lying when confronted about their mistakes, then someone else should step in and fill that void in the dating marketplace.
Re: (Score:2)
For one, physicians take the Hyppocratic Oath. Site admins usually don't.
Re: Prevent HIV. Don't do as in this haiku. (Score:2, Insightful)
Hateful bigotry,
You should be ashamed of your
Outdated dogma.
Re: (Score:2)
It's real.
It's called a pozzing party.
Promiscuity (Score:1)
A threat? (Score:1)
Hzone is run by complete idiots (Score:3)
No, we didn’t notify them. If you will not publish them out, nobody else would do that, right? And I believe you will not publish them out, right?"
They assume only DataBreach has the data, which is something they actually don't know for sure. On top of that, they assume that DataBreach will not publish the data or sell it to the black market. I believe they will not, but if you are responsible for personal informations and the data gets into the hands of a third party you cannot just assume the third party will behave the way most convenient for you just because the alternative makes you unconfortable.
Re: (Score:2)
The writer at DataBreach indicated that she did not download the data set, because it contained personal information. That was in response to a comment asking if she went ahead and notified the users herself. It definitely sounds like the people running the site don't have a clue though. The week or so that it took them to secure the database was probably spent finding a person who knew how to do that.
They should be arrested... (Score:1)
Umm....if that sort of threat were made, it's a legitimate death threat, and the police should arrest the morons who made it.
Multiple infections (Score:3)
Apologies... (Score:2)
Bennett (Score:2)
Another, "fake hype/nobody cares", bennett story.