Not clickbait in the slightest. This is not about Facebook per se about persistence of their shared data - my information - once it's made public. HIPAA, by comparison has all sorts of statements about PII and business associates. But apparently FB can share with whoever has a pulse and I can find out about it later via Shodan.
I wrote this even with the original link and version of the headline.
"Millions of Facebook Records Found on Amazon Cloud Servers" was the original headline.
That headline the first thing you would likely think is Facebook was using AWS and left some data open somewhere.
It 100% implied Facebook was doing more wrong now, instead of the companies that already had the data from the previous issues were not handling the data correctly.
Yes this news is still notable. But the headline gave the wrong impression and was banking on the already bad attitude towards Facebook.
Eh, I don’t really care if it is a failure on the point of Facebook engineers or a failure on the point of Facebook data policy that allowed other engineers to post data about me in an insuecure manner.
Seems like splitting hairs here.
I still think this is fundamentally Facebook’s problem.
For example, I don’t care if it’s a failure of the payments ecosystem or my bank if using a new payment technonlogy opens me up to fraud that then drains my bank account- I just won’t use that new technology anymore. Similarly I don’t care who’s fault it is if using Facebook leaks information about me I didn’t realize and didn’t want to become used in the ways it has been. I will just not use Facebook anymore.
I swear, every HN article, you get 10% of the comments are about the article being discussed, and the other 90% are people quibbling over the headline.
Ok, that's an exaggeration.
And when the comments are good, they are really good. Makes the entire HN experience worthwhile.
So sorry? I mentioned Shodan as a way of tying it to other leaks of negligence and I why I thought this was relevant, and not just a tossaway clickbait article. I think my disagreement is deeper in nature than semantic on the headline. I even dropped in HIPAA as a model for regulations of shared private info, as gross as it may be to think about in a regulatory sense.