← Back to context

Comment by 9dev

1 month ago

Don’t you remember the giant phishing campaigns like back when lots of celebrities got their nudes in iCloud stolen and published? These things happen all the time, and are incredibly painful. Much, much more so than being unable to share your account with a coworker.

> ...when lots of celebrities got their nudes in iCloud stolen and published?

Right-- high-value victims of targeted attacks. So not regular people.

  • Regular people get their data stolen all the time, you just don’t hear about it. Just look at the credential dumps and the most common passwords.

    • I don't get the sense that regular people get data "stolen".

      Ransom is the only thing I see happening to end user data.

      Credential thefts facilitate theft of money. It might might help the attacker to rifle thru somebody's data to find information that helps answer "secret" questions, to trick friend and family into getting phished, and maybe blackmail, but I don't see a market for end user data that would drive data theft. Nobody is buying end user photos, videos, email, etc. (Anybody who would possibly buy it just tricks/entices users into giving it to them for free to train their AI models anyway.)

      1 reply →

    • At the scale you'd expect that to happen, looking at credential dumps, you'd also expect to hear a lot about it.

      And yet, you don't. Which leads me to the conclusion that the data dump are overblown.

      I think companies around the world come to the same obvious conclusion, which is why these data breaches keep happening, and the companies whose systems were breached are never any worse for the wear.