Husband, Father, Infosec @ SAS, Linux/Maker/Gadget/Automation guy. Views are my own and do not represent those of my employer. GPG KeyID 0x3DAECE84E841D6E3.
I really recommending reading this.
In summary, a company which does ID verification for in-person interactions (hotels, car rentals, ID verification for alcohol or marijuana, etc) has some how exposed over 153,000,000 drivers licenses for people in the United States and Canada.
It is a catastrophic data breach, probably one of the worse I've ever seen. If you're in the United States and have traveled, gotten a hotel, purchased marijuana or alcohol, there is a high probability you're in this.
Unlike other breaches, this includes a photo of the person (from the license), making verification you've identified the person significantly easier.
This poses a significant threat to celebrities (musicians, YouTubers, streamers, adult entertainers, actors, etc), politicians, lawyers, wealthy people (CEOs, investors, people of public interest), Law Enforcement Officers, etc
Krebs himself, and several other security researchers, have already confirmed they're in the data leak.
tl;dr gah damn dawg this company is going to be sued into oblivion
https://t.co/QpsegBUzH5
@HackingDave I read somewhere it’s like we are 25 days pre-Covid pandemic; we had no idea what was coming. That’s the kind of impact we may see. In my peer circles there is agreement that their IT orgs are not structured to absorb this awakening without significant fallout.
Ok @tilebar one of your shippers is trolling us or you only have one size shipping box. 14” squared box with 4lbs of postage and packing for a single subway tile? And it was free? We’ve had a good laugh but seriously?
I didn’t have “@Ticketmaster couldn’t get more sleazy” on my bingo card. Can’t login unless you agree to not join a class action lawsuit. I think I’ll pass and figure out how to join said lawsuit.
.@PaloAltoNtwks Can PA comment as to why support does not consider the copying a valid SAML token from one machine (that meets cond. access policy) to a 2nd (that doesn't), then using that token to login on 2nd device, would permit GlobalProtect to bypass cond. access policy.
@deltafaucet why can I not 1) send an email to open a support case for a defective faucet or 2) have your chat function get me to a way to open a support case. Is there not an "email support" or web page to open a ticket anymore? The chat function is pointless.
@GovRonDeSantis@JayCollinsFL Thank you both for your service. Being that you both are fathers, I would ask that the governors office please demand accountability in the Giovanni Pelletier case. The family deserves to understand the circumstances that took place before and after the disappearance of their son