Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

How you look depends on where you go.


interests / soc.culture.china / Re: Vast Cache of Chinese Police Files Offered for Sale in Alleged Hack

SubjectAuthor
o Re: Vast Cache of Chinese Police Files Offered for Sale in Alleged Hackltlee1

1
Re: Vast Cache of Chinese Police Files Offered for Sale in Alleged Hack

<9b88d9c0-d089-4e01-ab3a-35acf1e3d0e2n@googlegroups.com>

  copy mid

https://novabbs.com/interests/article-flat.php?id=9933&group=soc.culture.china#9933

  copy link   Newsgroups: soc.culture.china
X-Received: by 2002:a05:620a:4452:b0:6b2:4f49:d053 with SMTP id w18-20020a05620a445200b006b24f49d053mr4926253qkp.685.1657362521814;
Sat, 09 Jul 2022 03:28:41 -0700 (PDT)
X-Received: by 2002:a05:6808:1442:b0:339:ec20:8a07 with SMTP id
x2-20020a056808144200b00339ec208a07mr1057008oiv.200.1657362521503; Sat, 09
Jul 2022 03:28:41 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: soc.culture.china
Date: Sat, 9 Jul 2022 03:28:41 -0700 (PDT)
In-Reply-To: <f965e1a4-c679-4c2a-a16a-bf17a04a1876n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=174.99.33.53; posting-account=sQgtagoAAAB2Cf4qBTW8cwfp7bDiKK3s
NNTP-Posting-Host: 174.99.33.53
References: <f965e1a4-c679-4c2a-a16a-bf17a04a1876n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <9b88d9c0-d089-4e01-ab3a-35acf1e3d0e2n@googlegroups.com>
Subject: Re: Vast Cache of Chinese Police Files Offered for Sale in Alleged Hack
From: ltl...@hotmail.com (ltlee1)
Injection-Date: Sat, 09 Jul 2022 10:28:41 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Lines: 108
 by: ltlee1 - Sat, 9 Jul 2022 10:28 UTC

On Friday, July 8, 2022 at 12:59:17 PM UTC-4, David P. wrote:
> Vast Cache of Chinese Police Files Offered for Sale in Alleged Hack
> By Karen Hao and Rachel Liang, July 4, 2022, WSJ
>
> A vast trove of data on Chinese citizens allegedly siphoned from a police database, some of which checks out as legitimate, is being offered for sale by an anonymous hacker or hacking group. If confirmed, it would mark one of history’s largest leaks of personal data.
>
> The cache allegedly includes billions of records stolen from police in Shanghai, containing data on one billion Chinese citizens, according to a post advertising its availability that was published on Thursday by the hacker on a popular online cybercrime forum. The post, which began circulating on social media over the weekend, put the price for the leak at 10 Bitcoin, or roughly $200,000.
>
> Cybersecurity experts say the claimed hack is alarming not just for its alleged size—which would rank among the biggest ever recorded and the largest known for China—but also because of the sensitivity of the information contained in the government database.
>
> A sample of the data posted by the hacker, who claimed it included 750,000 records, contained individuals’ personal names, national ID numbers, phone numbers, birthdays and birthplaces, as well as detailed summaries of crimes and incidents reported to the police. The cases ranged from incidents of petty theft and cyber fraud to reports of domestic violence, dating as far back as 1995 to as recently as 2019.
>
> While the scope of the data leak remains unconfirmed, The Wall Street Journal verified several of the records in the leak by calling people whose numbers were listed. Five people confirmed all of the data, including case details that would be difficult to obtain from any source other than the police. Four more people confirmed basic information such as their names before hanging up.
>
> One woman, alarmed at the accuracy of the leaked details, asked whether the information about her had come from the iPhone that she had reported stolen in her case file in 2016.
>
> Another man, surnamed Wei, who had reported being defrauded of 30,000 yuan after scammers persuaded him to join an investment scheme, according to the records released by the hacker, sighed after hearing that his data had been leaked. “We are all running naked,” he said, using popular Chinese slang for a lack of privacy.
>
> Cybersecurity experts remain cautious, however, about believing all of the hackers’ claims.
>
> Troy Hunt, a web-security consultant based in Australia, said the sheer size of the database—which would include the majority of China’s population of 1.4 billion people—drew some suspicion, as did the anonymity of the user who posted the information.
>
> While most hackers are driven by financial motives, the solicitation for a large sum of money also raises the possibility that the claim has been exaggerated or falsified, Mr. Hunt said.
>
> Several numbers that the Journal tried were invalid or no longer in service. It is not uncommon for mobile phone users in China to change their numbers every few years.
>
> The Shanghai police, Shanghai propaganda office and Chinese internet regulator didn’t respond to requests for comment.
>
> On the forum where the database has been posted for sale, the hacker or group has claimed that the data was taken from Aliyun, a cloud computing subsidiary of Alibaba Group, which they say hosts the Shanghai police database..
>
> On Monday, Zhao Changpeng, CEO of cryptocurrency exchange Binance, tweeted that the company had detected the hack and had “stepped up verifications for users potentially affected.” Binance didn’t respond to a request for comment.
>
> Data leaks have been rampant globally in recent years. In 2021, a total of 4,145 publicly disclosed breaches collectively exposed over 22 billion records, according to cybersecurity company Risk Based Security.
>
> But such a massive leak would be particularly sensitive in China, where black-market data brokers once did a brisk business trafficking in personal data. Over the past few years, Beijing has ramped up its protection of personal information, most recently passing the Personal Information Protection Law in 2021, in part due to widespread public anger that data breaches had reached unbearable levels.
>
> The actions have specifically targeted companies, however, leaving broad carve-outs for the government collection of information under national security considerations.
>
> Cybersecurity experts say such a breach could have lasting and unpredictable consequences for the individuals affected.
>
> “Trying to remove your information from the internet is like trying to remove pee from a pool,” said Mr. Hunt. “It just goes into a big melting pot of exposed data and you have no idea which bit has come from where.”
>
> Mr. Hunt added that the leak highlighted how little China’s extensive system of internet filters, commonly referred to as the Great Firewall, can do to prevent its citizens’ data from being hacked and posted online for anyone to have access to.
>
> “Despite China’s best efforts, the internet really doesn’t have borders,” he said.
>
> https://www.wsj.com/articles/vast-cache-of-chinese-police-files-offered-for-sale-in-alleged-hack-11656940488

Meaningless article objectively speaking.

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor