Not a security person, but are there standards for PII encrypted at rest?
Surely this is common? Surely?
Buttons840 15 minutes ago [-]
I'd feel a lot better if I knew some red team security researchers were going hard trying to break into critical national infrastructure, just to ensure it's not too easy, but probably this isn't happening because it would be a felony to even try. The bad guys are free to try though.
All this will tend to get blamed on AI, but AI didn't put these vulnerabilities into place. AI is just a tool that can be used to discover vulnerabilities, and the only question we have to answer is whether or not that tool should be available to regular people.
Some will try to frame the question as being about whether we should allow AI aid in cyber-security, but that's not the question. This technology isn't going away. The bad guys will have it. Nations will have it. Again, the question is, can regular people also continue to have it?
jacquesm 25 minutes ago [-]
Mixed feelings. I feel sorry for the people whose info was taken but Scribd does not have my sympathy.
neya 10 minutes ago [-]
Scribd is the most predatory site that steals people's content and then doesn't honor their promise (upload a PDF to download one..oops that one doesn't qualify, but we will keep your copy!). Fuck em, they built their entire model on predatory behaviour towards broke college students, hope they burn to the ground.
> We detected that an unauthorized third party may have gained access to certain user data in one of our systems. After investigating this activity, we found that the third party may have accessed your email address and the following of your information: last 4 digits of your credit card and country, credit card issuer, credit card
expiry date.
smurda 1 hours ago [-]
I only received this same email a few hours ago, Oct 30. Why not tell all customers at once, especially if payment information was involved?
How long until we all get cyber-war fatigue and this isn't even news anymore.
Razengan 32 minutes ago [-]
Man, people stopped caring about all the leaks and breaches and dark web data sales over 10 years ago
Avicebron 14 minutes ago [-]
Is resignation because nothing was ever fixed or done about it because it wasn't "economically viable" considered not caring?
paaloeye 20 minutes ago [-]
I'm wonder how many users are exposed
isatty 8 minutes ago [-]
You’re saying sribd has actually worked for people? I just ignore it in my searches and just find the pdf elsewhere.
collabs 1 hours ago [-]
I don't see any email like this in my inbox.
Perhaps they are only sending this email
to those who have their payment information
saved on Scribd?
PeterHolzwarth 37 minutes ago [-]
@dang, always been curious about this: why are posts like this grey text vs dark test? It's difficult to read, being so low-contrast. I assume it's based on numbers, the poster, up/downvotes etc - but it seems a poor use of those systems given it sacrifices readability. Is it just a light mode thing? Is it just me?
avree 7 minutes ago [-]
As far as I know this is a relic from the PG days. It was done to keep the focus on URL based submissions, and avoid people using the platform as a text/blogging platform (at the time, Reddit was rising, and self posts there were already very common.) URLs were dark, text was meant to support the URL and was lighter.
I think the color actually got lightened a few times.
dozerly 28 minutes ago [-]
I always assumed it was the down arrow affecting it, but I have always giggled at the fact that people with sharp eyes have to endure the bad posts while others do not
8cvor6j844qw_d6 49 minutes ago [-]
Did some exploit get disclosed? HN frontpage is spammed with breaches.
ipsum2 41 minutes ago [-]
The exploit is called AI (or LLMs)
engineer_22 26 minutes ago [-]
Nice, I've been trying to hack scribd to download a pdf all day
pquigley 26 minutes ago [-]
[flagged]
TZubiri 2 hours ago [-]
Wonder if there's anything of worth.
Hackers got their hands on a loot of 300k pirated book pdfs? And internal documents that were already leaked by someone that googled "how to share a pdf".
coldfloor 1 hours ago [-]
Geez, I know nobody here clicks through and reads articles before commenting, but are we not even reading the posts now?
>we found that the third party may have accessed your email address... last 4 digits of your credit card and country, credit card issuer, credit card expiry date, payment history
TZubiri 1 hours ago [-]
not even worth disclosing nowadays, almost entirely public info
derwiki 55 minutes ago [-]
Great reason to use privacy.com virtual cards wherever possible and online
tjwebbnorfolk 41 minutes ago [-]
yea, until privacy.com gets hacked
aliasxneo 31 minutes ago [-]
What would they do with my bank account and routing number?
AdieuToLogic 19 minutes ago [-]
> What would they do with my bank account and routing number?
Use it for money laundering and fraud.
fnord77 1 hours ago [-]
I don't even think they actually pirated book pdfs. Just previews to get you to sign up that lead to no where
LordGronk 9 minutes ago [-]
Scribd has a ton of oop but copyrighted licensed content, which I highly doubt they pay licensing fees for.
Rendered at 04:52:27 GMT+0000 (Coordinated Universal Time) with Vercel.
Surely this is common? Surely?
All this will tend to get blamed on AI, but AI didn't put these vulnerabilities into place. AI is just a tool that can be used to discover vulnerabilities, and the only question we have to answer is whether or not that tool should be available to regular people.
Some will try to frame the question as being about whether we should allow AI aid in cyber-security, but that's not the question. This technology isn't going away. The bad guys will have it. Nations will have it. Again, the question is, can regular people also continue to have it?
And they posted about a security incident on their blog on Oct 1. https://support.scribd.com/hc/en-us/articles/53787421531284-...
I think the color actually got lightened a few times.
Hackers got their hands on a loot of 300k pirated book pdfs? And internal documents that were already leaked by someone that googled "how to share a pdf".
>we found that the third party may have accessed your email address... last 4 digits of your credit card and country, credit card issuer, credit card expiry date, payment history
Use it for money laundering and fraud.