MSI warranty claim database was publicly accessible via Google
According to the YouTube channel Gamers Nexus, over 600,000 customer warranty claims for MSI products were publicly accessible via Google search. MSI, a leading computer hardware and peripherals manufacturer, had exposed data that included sensitive information such as names, addresses, phone numbers, and specific order details.
https://stackdiary.com/msi-warranty-claim-database-was-publicly-accessible-via-google/Open linkView original on lemmy.world273
Comments20
Gobbless Gamers Nexus
salutes the GN flag
Do not forget that accessing stuff on Google can probably get you to prison.
When you see something illegal on Google that should have never been published publicly you need to immediately avert your eyes and plug your ears. 🙉
Don't be the next Aaron Swartz...
Aaron Swartz story is a bit different, because he actually paid for those documents via taxpayer money.
But other parts of your comment is true. A good analogy: if someone leaves their house open, and you walk in, that is still
burglarytrespassing.I think you mean it's still trespassing, burglary requires intent to commit a crime while entering a building illegally.
Yes, in my native language the two words are the same
Ah, forgive me, makes sense.
Just out of curiosity, which language is that?
In your analogy that isn’t trespassing. You’d have to knowingly violate a no trespassing sign or a persons command to leave for it to be trespassing.
That's only true for areas of land that aren't visibly occupied. Entering any building without permission is considered first degree trespassing in my state, and I don't think that's a unique definition. Traversing the land near a dwelling is considered second degree trespass.
Bad analogy imho. This would be like going in a mall, entering a store, and being told that it's actually a house and you're trespassing
I don’t believe that, it’s not classified information. Maybe if you then distributed the personal information, but they redacted whatever is shown. If it was classified information, then it’d be illegal.
That’s like saying if you read a piece of paper you found outside and it’s got personal information, you just broke the law. I’m not a lawyer but I don’t think clicking a link from Google and reading unclassified documents is illegal in any way.
Or if the government sends you the social security numbers of every teacher in the state. Then you're a hacker for responsibly disclosing the issue:
Missouri gov. calls journalist who found security flaw a “hacker,” threatens to sue
Et tu, MSI?
Jokes on them, I never register products with the manufacturer.
Just make everything public and transparent because nobody seems to know how to actually protect data.
First zotac and then MSI.
Directly message their legal team instead to claim warranties.
Maybe employees are not so easily replacable after all.
No way to tell how these things happen that's for sure tho
Somehow that's not surprising, but it's still a yikes.
Source video: https://www.youtube.com/watch?v=DeE_gLl3j94