Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Very much a matter of defining 'themselves'. Our data in their hands. How do we know these people aren't the same incompetents who emailed a spreadsheet containing the personal information of nearly 19,000 Afghan asylum applicants (who had risked their lives to help the Brits) to someone outside the Ministry of Defense.

The government says the individual thought they were sending a list of about 150 names, not the whole set.

Meanwhile the Taliban have been taking revenge: https://pressway.org.uk/news/300408-hunt_for_tranclators_tal...



> A spreadsheet containing the personal information of about 18,700 Afghans and their relatives – a total of about 33,000 people – was accidentally forwarded to the wrong recipients by email in February 2022, Healey told lawmakers in the House of Commons.

This is why authorization matters. Don't send the spreadsheet; send a link to it, because e-mail doesn't implement authorization. Then you can revoke access at any time, and even prevent accidents by setting up access rules and monitoring at the org level.

https://www.aljazeera.com/news/2025/7/17/how-were-identities...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: