1y ago

MSI warranty claim database was publicly accessible via Google

stackdiary.com /msi-warranty-claim-database-was-publicly-accessible-via-google/

According to the YouTube channel Gamers Nexus, over 600,000 customer warranty claims for MSI products were publicly accessible via Google search. MSI, a leading computer hardware and peripherals manufacturer, had exposed data that included sensitive information such as names, addresses, phone numbers, and specific order details.

20 comments

Gobbless Gamers Nexus
salutes the GN flag
Do not forget that accessing stuff on Google can probably get you to prison.
When you see something illegal on Google that should have never been published publicly you need to immediately avert your eyes and plug your ears. 🙉
Don't be the next Aaron Swartz...
- Aaron Swartz story is a bit different, because he actually paid for those documents via taxpayer money.
  But other parts of your comment is true. A good analogy: if someone leaves their house open, and you walk in, that is still ~~burglary~~ trespassing.
  
  I think you mean it's still trespassing, burglary requires intent to commit a crime while entering a building illegally.
  
  In your analogy that isn’t trespassing. You’d have to knowingly violate a no trespassing sign or a persons command to leave for it to be trespassing.
  
  Bad analogy imho. This would be like going in a mall, entering a store, and being told that it's actually a house and you're trespassing
- I don’t believe that, it’s not classified information. Maybe if you then distributed the personal information, but they redacted whatever is shown. If it was classified information, then it’d be illegal.
  That’s like saying if you read a piece of paper you found outside and it’s got personal information, you just broke the law. I’m not a lawyer but I don’t think clicking a link from Google and reading unclassified documents is illegal in any way.
  
  Or if the government sends you the social security numbers of every teacher in the state. Then you're a hacker for responsibly disclosing the issue:
  Missouri gov. calls journalist who found security flaw a “hacker,” threatens to sue
Et tu, MSI?
Jokes on them, I never register products with the manufacturer.
Just make everything public and transparent because nobody seems to know how to actually protect data.
First zotac and then MSI.
Directly message their legal team instead to claim warranties.
Maybe employees are not so easily replacable after all.
No way to tell how these things happen that's for sure tho
Somehow that's not surprising, but it's still a yikes.
Source video: https://www.youtube.com/watch?v=DeE_gLl3j94

20 comments