6 ms·

I'm going to return and reflect on this comment after the breach.

cassac 4y ago
You might but nobody else will. Another day another breach. Nobody cares about the firings and they surely won’t care about the breach. I would even guess that for a large breach like the one T mobile had, most of their customers don’t know about it. And if they do the thing they care most about is trying to get their cash payment because “free money.” I’m not saying that’s how it should be but that’s how it is. Companies make decisions every day that are bad for their customers and everyday unless the customers are majorly inconvenienced they simply don’t care. Or maybe I’m in a bad mood today and casting everything in a negative light. Or both.
- nominusllc 4y ago
  I can tell my comment moved you to say something, but I dont think you stopped to consider what you might say, only that you needed to say something.
  - dreamlifelike 4y ago
    Cassac is correct, no one cares. Snark won’t make you right.
    - more_corn 4y ago
      Saying no one cares about breaches and security and the security and privacy of customer data is inaccurate. If you don’t care go ahead and post your social security number in this thread.
      - nomel 4y ago
        How is a social security number relevant for a Patreon breach? Worst case, they would get your name, password, IP, billing address, subscription list, and, unlikely, your credit card info. I think this is what people are somewhat immune to. For me, the password is unique, the name and billing address is public record, and my bank protects me from credit card fraud, since using one requires handing the number out multiple times a day. The only thing that bothers me is the IP address, but that was leaked in other breaches, once a few years ago, and twice this year. I think this is the same for most people.
        Kye 4y ago
        You do have to put in your SSN at some point to get paid. It's stored with Stripe, but a hacker could prompt people to re-enter it for capture citing some issue. How many people are savvy enough to question that?
        some_furry 4y ago
        "Please upload a new W-9 to comply with new IRS requirements." (Nevermind there are no new IRS requirements.)
        nomel 4y ago
        I suppose anything is possible with a full takeover. I was referring to data breaches.
- hammyhavoc 4y ago
  You seem to be suffering cognitive bias and projecting a lot of your own personal feelings with the "nobody else will". Well, obviously this is being proven wrong with the public's reaction to this. Is it a meaningful number of people? I couldn't say at present, but to talk in absolutes is silly.
  - jiveturkey 4y ago
    It's pretty obviously a rhetorical 'nobody', really meaning, the overwhelming majority. Which I find to be quite accurate.
    - jiveturkey 4y ago
      few days and a bigger layoff later and yup … no one cares. except the 2 people that closed their patroen accounts. so now i have to think it’s a reasonable guess that a security team member found out early and even possibly leaked it, even if only internally like to their boss. to contain it the whole team had to suddenly be let go. that’s beside the point. just a random theory. in this context, the point is that there’s been no follow up on the security layoff, no tie in with the larger story, so yeah no one cared
koheripbal 4y ago
I consider all online accounts as breached. That is why I use unique passwords. If my CC is compromised, i'll notice in my monthly statement and report the bad charges (this has happened twice in 10 years). ...once from using the card in eastern Europe and the 2nd time at a hospital recently. Not using services online because you're afraid of a breach is highly inefficient. Better to share as little as possible and have consistencies when there are breaches.
- hammyhavoc 4y ago
  I'd like to think that my CC provider would flag any bad transactions as they happen, as most do.
- kornhole 4y ago
  I generally do the same but go a little further. I use an anonaddy email address and a virtual card from privacy.com with limit. This way Patreon and their customers do not know who is funding these creators. A breach is also a negligible risk. Unfortunately, I am probably in the 1% of people who take these measures.
electroly 4y ago
They were breached once before (in 2015) and it didn't seem to have any meaningful impact on them.
- tanseydavid 4y ago
  They had a security staff back then.
  - deleted 4y ago
    [deleted]

You might but nobody else will. Another day another breach. Nobody cares about the firings and they surely won’t care about the breach. I would even guess that for a large breach like the one T mobile had, most of their customers don’t know about it. And if they do the thing they care most about is trying to get their cash payment because “free money.” I’m not saying that’s how it should be but that’s how it is. Companies make decisions every day that are bad for their customers and everyday unless the customers are majorly inconvenienced they simply don’t care. Or maybe I’m in a bad mood today and casting everything in a negative light. Or both.

nominusllc 4y ago
I can tell my comment moved you to say something, but I dont think you stopped to consider what you might say, only that you needed to say something.
- dreamlifelike 4y ago
  Cassac is correct, no one cares. Snark won’t make you right.
  - more_corn 4y ago
    Saying no one cares about breaches and security and the security and privacy of customer data is inaccurate. If you don’t care go ahead and post your social security number in this thread.
    - nomel 4y ago
      How is a social security number relevant for a Patreon breach? Worst case, they would get your name, password, IP, billing address, subscription list, and, unlikely, your credit card info. I think this is what people are somewhat immune to. For me, the password is unique, the name and billing address is public record, and my bank protects me from credit card fraud, since using one requires handing the number out multiple times a day. The only thing that bothers me is the IP address, but that was leaked in other breaches, once a few years ago, and twice this year. I think this is the same for most people.
      - Kye 4y ago
        You do have to put in your SSN at some point to get paid. It's stored with Stripe, but a hacker could prompt people to re-enter it for capture citing some issue. How many people are savvy enough to question that?
        some_furry 4y ago
        "Please upload a new W-9 to comply with new IRS requirements." (Nevermind there are no new IRS requirements.)
        nomel 4y ago
        I suppose anything is possible with a full takeover. I was referring to data breaches.
hammyhavoc 4y ago
You seem to be suffering cognitive bias and projecting a lot of your own personal feelings with the "nobody else will". Well, obviously this is being proven wrong with the public's reaction to this. Is it a meaningful number of people? I couldn't say at present, but to talk in absolutes is silly.
- jiveturkey 4y ago
  It's pretty obviously a rhetorical 'nobody', really meaning, the overwhelming majority. Which I find to be quite accurate.
  - jiveturkey 4y ago
    few days and a bigger layoff later and yup … no one cares. except the 2 people that closed their patroen accounts. so now i have to think it’s a reasonable guess that a security team member found out early and even possibly leaked it, even if only internally like to their boss. to contain it the whole team had to suddenly be let go. that’s beside the point. just a random theory. in this context, the point is that there’s been no follow up on the security layoff, no tie in with the larger story, so yeah no one cared

koheripbal 4y ago

I consider all online accounts as breached. That is why I use unique passwords. If my CC is compromised, i'll notice in my monthly statement and report the bad charges (this has happened twice in 10 years). ...once from using the card in eastern Europe and the 2nd time at a hospital recently. Not using services online because you're afraid of a breach is highly inefficient. Better to share as little as possible and have consistencies when there are breaches.

hammyhavoc 4y ago
I'd like to think that my CC provider would flag any bad transactions as they happen, as most do.
kornhole 4y ago
I generally do the same but go a little further. I use an anonaddy email address and a virtual card from privacy.com with limit. This way Patreon and their customers do not know who is funding these creators. A breach is also a negligible risk. Unfortunately, I am probably in the 1% of people who take these measures.

electroly 4y ago

They were breached once before (in 2015) and it didn't seem to have any meaningful impact on them.

tanseydavid 4y ago
They had a security staff back then.
- deleted 4y ago
  [deleted]