Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So tell them no. I don't want your clients knowing my street address.

I mean, for all you know, I'm in a domestic abuse shelter. Are you going to take responsibility for my well-being if your clients' database gets leaked? And are you confident that your clients know how to competently secure a database if they can't even use HTTPS?



We don't store any PII, so I don't see what the problem is here?


Any data about the user - even simple timestamps - that is leaked is an increasingly-serious problem. Just because you don't have interesting data doesn't mean other people cannot correlate your data with other aggregated personally identifiable data.

edit: Sorry, partial post due to accidentally hitting enter.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: