this post was submitted on 22 Dec 2023
125 points (91.9% liked)

Mildly Infuriating

35488 readers
543 users here now

Home to all things "Mildly Infuriating" Not infuriating, not enraging. Mildly Infuriating. All posts should reflect that.

I want my day mildly ruined, not completely ruined. Please remember to refrain from reposting old content. If you post a post from reddit it is good practice to include a link and credit the OP. I'm not about stealing content!

It's just good to get something in this website for casual viewing whilst refreshing original content is added overtime.


Rules:

1. Be Respectful


Refrain from using harmful language pertaining to a protected characteristic: e.g. race, gender, sexuality, disability or religion.

Refrain from being argumentative when responding or commenting to posts/replies. Personal attacks are not welcome here.

...


2. No Illegal Content


Content that violates the law. Any post/comment found to be in breach of common law will be removed and given to the authorities if required.

That means: -No promoting violence/threats against any individuals

-No CSA content or Revenge Porn

-No sharing private/personal information (Doxxing)

...


3. No Spam


Posting the same post, no matter the intent is against the rules.

-If you have posted content, please refrain from re-posting said content within this community.

-Do not spam posts with intent to harass, annoy, bully, advertise, scam or harm this community.

-No posting Scams/Advertisements/Phishing Links/IP Grabbers

-No Bots, Bots will be banned from the community.

...


4. No Porn/ExplicitContent


-Do not post explicit content. Lemmy.World is not the instance for NSFW content.

-Do not post Gore or Shock Content.

...


5. No Enciting Harassment,Brigading, Doxxing or Witch Hunts


-Do not Brigade other Communities

-No calls to action against other communities/users within Lemmy or outside of Lemmy.

-No Witch Hunts against users/communities.

-No content that harasses members within or outside of the community.

...


6. NSFW should be behind NSFW tags.


-Content that is NSFW should be behind NSFW tags.

-Content that might be distressing should be kept behind NSFW tags.

...


7. Content should match the theme of this community.


-Content should be Mildly infuriating.

-At this time we permit content that is infuriating until an infuriating community is made available.

...


8. Reposting of Reddit content is permitted, try to credit the OC.


-Please consider crediting the OC when reposting content. A name of the user or a link to the original post is sufficient.

...

...


Also check out:

Partnered Communities:

1.Lemmy Review

2.Lemmy Be Wholesome

3.Lemmy Shitpost

4.No Stupid Questions

5.You Should Know

6.Credible Defense


Reach out to LillianVS for inclusion on the sidebar.

All communities included on the sidebar are to be made in compliance with the instance rules.

founded 1 year ago
MODERATORS
 

Every time that there is a leak like this it's infinitely aggravating how the spin department tries to downplay what happened. If you are using SMS based MFA you probably want to stop doing that now.

all 27 comments
sorted by: hot top controversial new old
[–] [email protected] 14 points 10 months ago* (last edited 10 months ago) (2 children)

Edit: sorry, app didn't show the entire image by default, they DO list exactly what was lost, not a bad email tbh (although better if they didn't lose it)

Isn't it saying that they didn't have those bits so couldn't loose them?

It would have been more useful (but look worse for them!) If they just listed what was lost....

[–] [email protected] 1 points 10 months ago (2 children)

Yup and that's the infuriating part. It's not helpful or useful, it 100% a cya.

[–] [email protected] 11 points 10 months ago (1 children)

Your title implies they lost all the bad stuff though

[–] [email protected] 1 points 10 months ago (1 children)

With the IMEI and SIM card information they now have the details needed to take over MFA. I share my birthdate with people that I casually know, I try not to do that with MFA codes. Credit card details would be bad, but at this point with the number of people who have leaked it, I would be 100% surprised if you couldn't find our CC data via a google search.

[–] [email protected] 4 points 10 months ago (1 children)

Setup TOTP NOW. Mint added proper TOTP authentication as MFA a while back that should block sms based MFA. Might be a good way to prevent sim swapping attacks.

[–] [email protected] 1 points 10 months ago (1 children)

Might work for mint but what about all the other accounts with other companies using mfa?

[–] [email protected] 2 points 10 months ago* (last edited 10 months ago)

The goal here is to prevent someone from requesting a SIM replacement to unlock your other accounts. Since the attacker can use the IMEI and SIM info to contact customer service. If you have MFA on your mint account then they should ask for extra info before sending the replacement SIM, which would help with the current situation.

[–] [email protected] 5 points 10 months ago (1 children)

The reality is they may not know exactly what was obtained, but they do know it wasn’t anything they don’t collect (like DOB, SSN, etc listed in the message). Instead of looking at this purely as a CYA message, instead looking at it as informing you as soon as they had any idea your information may have been impacted instead of waiting weeks/months to inform you. Don’t let perfect be the enemy of good.

[–] [email protected] 0 points 10 months ago

Don’t let perfect be the enemy of good.

This is nice. I'ma keep it.

[–] [email protected] 13 points 10 months ago (1 children)

Not seeing anything in my email about this one. Is it a new one or from earlier this year?

[–] [email protected] 11 points 10 months ago

This is fresh... came in early this morning. Not sure if they got all of them or a subset.

[–] [email protected] 8 points 10 months ago

But with name, email, phone number, and sim card serial number, it's trivial for a scammer to do a sim swap attack ...

They should replace the SIM card to all users immediately, at their expense

[–] [email protected] 7 points 10 months ago (1 children)

I think leaks should come with stiff penalty. Like the CTO goes to jail, pays each person involved for a lifetime worth of damage, and then has their head and arms locked in an old timey wooden head and hands stock lock at the center of town square where the public gets to throw rotten food at their face. No but seriously, they need to pay people affected a lot of money for potentially fucking their credit up because that's where this kind of data goes.

[–] [email protected] 5 points 10 months ago (1 children)
[–] [email protected] 6 points 10 months ago (1 children)

Don't you mean intriguing?

[–] [email protected] 4 points 10 months ago

It can be both

[–] [email protected] 5 points 10 months ago

They do know that that's exactly the information that's behind every scam right?