Technology

59374 readers

3463 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

273

MSI warranty claim database was publicly accessible via Google (stackdiary.com)

submitted 4 months ago by [email protected] to c/[email protected]

20 comments fedilink hide all child comments

According to the YouTube channel Gamers Nexus, over 600,000 customer warranty claims for MSI products were publicly accessible via Google search. MSI, a leading computer hardware and peripherals manufacturer, had exposed data that included sensitive information such as names, addresses, phone numbers, and specific order details.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 38 points 4 months ago (2 children)

Do not forget that accessing stuff on Google can probably get you to prison.

When you see something illegal on Google that should have never been published publicly you need to immediately avert your eyes and plug your ears. 🙉

Don't be the next Aaron Swartz...

[–] [email protected] 27 points 4 months ago* (last edited 4 months ago) (3 children)

Aaron Swartz story is a bit different, because he actually paid for those documents via taxpayer money.

But other parts of your comment is true. A good analogy: if someone leaves their house open, and you walk in, that is still ~~burglary~~ trespassing.

[–] [email protected] 13 points 4 months ago (1 children)

I think you mean it's still trespassing, burglary requires intent to commit a crime while entering a building illegally.

[–] [email protected] 5 points 4 months ago (2 children)

Yes, in my native language the two words are the same

[–] [email protected] 4 points 4 months ago

Ah, forgive me, makes sense.

[–] [email protected] 2 points 4 months ago

Just out of curiosity, which language is that?

[–] [email protected] 9 points 4 months ago* (last edited 4 months ago) (1 children)

In your analogy that isn’t trespassing. You’d have to knowingly violate a no trespassing sign or a persons command to leave for it to be trespassing.

[–] [email protected] 3 points 4 months ago

That's only true for areas of land that aren't visibly occupied. Entering any building without permission is considered first degree trespassing in my state, and I don't think that's a unique definition. Traversing the land near a dwelling is considered second degree trespass.

[–] [email protected] 7 points 4 months ago* (last edited 4 months ago)

Bad analogy imho. This would be like going in a mall, entering a store, and being told that it's actually a house and you're trespassing

[–] [email protected] 8 points 4 months ago* (last edited 4 months ago) (1 children)

I don’t believe that, it’s not classified information. Maybe if you then distributed the personal information, but they redacted whatever is shown. If it was classified information, then it’d be illegal.

That’s like saying if you read a piece of paper you found outside and it’s got personal information, you just broke the law. I’m not a lawyer but I don’t think clicking a link from Google and reading unclassified documents is illegal in any way.

[–] [email protected] 7 points 4 months ago

Or if the government sends you the social security numbers of every teacher in the state. Then you're a hacker for responsibly disclosing the issue:
Missouri gov. calls journalist who found security flaw a “hacker,” threatens to sue