Slashdot Mirror
Following Data Leak, HIV Dating App's Developers Threaten Infection (csoonline.com)
itwbennett writes: Sometime before November 29, the MongoDB housing the data of Hzone, a dating app for HIV-positive singles, was exposed to the Internet. The company, displeased with having the security incident disclosed, responded to an email notification from DataBreaches.net with this threat: "Why do you want to do this? What's your purpose? We are just a business for HIV people. If you want money from us, I believe you will be disappointed. And, I believe your illegal and stupid behavior will be notified by our HIV users and you and your concerns will be revenged by all of us. I suppose you and your family members don't want to get HIV from us? If you do, go ahead." Hzone later apologized for the threat.
So...we've got a company that runs a business by trading on someone else's misfortune. Rather "ballsy" to go after the folks reporting the breach rather than focus on the fact that their customers are flapping in the breeze as a result of their incompetence. Replace HIV with "leprosy" or "cancer"....the result is the same.
Sad.
Somebody picked the wrong people to fuck with...
"Following Data Leak, HIV Dating App's Developers Threaten Infection"
Does the title even parse?
Does the title even parse?
Yes, but it won't make sense to you if you don't bother to read the summary. Point being that by allowing HIV patients to date each other means they won't be dating you so this site's existence means you're less likely to get infected.
Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
"Following Data Leak, HIV Dating App's Developers Threaten Infection"
Does the title even parse?
"Following {an event}, {subject} threatens {an act}." What's the issue?
Science is all about firing a drunk pig out of a cannon just to see what happens.
A dating app is not a covered entity under HIPAA. Covered entities include health plans, health care providers, and health care clearinghouses.
You can't spell "oneiromancy" without "roman".
There's legit whistle blowing, and then there's this... What was the point, to extort and harass ppl. with HIV?
You obviously didn't read their article, their point was to stop the leak. They didn't extort anyone. They just wanted the leak to stop (or at least the web site shut down).
This is a data breach for the sake of a data breach (and boosting the status of a cracker or group's ego - who is "anonymous" anyway, of course, so don't see the point -- ??).
Hackers? You're going a bit far.
This information was getting indexed by at least one commercial search engine. If the information is so easy to access that even a normal search engine has access to it. The web site has done something wrong and the person who found this out is probably not much of a hacker.
But if then, the web site refuses to fix the leak, nor shut down the web site, five days after you've notified them and been in communication with them. Then, there is something seriously wrong with the site. If I had been the person running the site, I would have shut down the web site immediately, period. There is no excuse. If you don't know how to fix it, that's fine, then please just shut down the site. It's better your site is down for a week, than all that data being exposed out there for that same week.
Furthermore since the web site owner is lying about the number of ip addresses having accessed that confidential data, I think they should be sued and shut down permanently by their users (or simply shut down by the authorities). This site provides a valuable service, but if they don't know what they're doing and they're lying when confronted about their mistakes, then someone else should step in and fill that void in the dating marketplace.
Hateful bigotry,
You should be ashamed of your
Outdated dogma.
No, we didn’t notify them. If you will not publish them out, nobody else would do that, right? And I believe you will not publish them out, right?"
They assume only DataBreach has the data, which is something they actually don't know for sure. On top of that, they assume that DataBreach will not publish the data or sell it to the black market. I believe they will not, but if you are responsible for personal informations and the data gets into the hands of a third party you cannot just assume the third party will behave the way most convenient for you just because the alternative makes you unconfortable.
I feel for these people. Not only are they HIV positive, but they are also infected with MongoDB.