this post was submitted on 19 Dec 2023
182 points (100.0% liked)

Privacy

789 readers
32 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

“Verizon royally fucked up,” Poppy told me in a phone call. “There’s no way around it.” Verizon, she added, was “100% at fault.”

Verizon handed Poppy’s personal data, including the address on file and phone logs, to a stalker who later directly threatened her and drove to an address armed with a knife. Police then arrested the suspect, Robert Michael Glauner, who is charged with fraud and stalking offenses, but not before he harassed Poppy, her family, friends, workplace, and daughter’s therapist, Poppy added. 404 Media has changed Poppy’s name to protect her identity.

Glauner’s alleged scheme was not sophisticated in the slightest: he used a ProtonMail account, not a government email, to make the request, and used the name of a police officer that didn’t actually work for the police department he impersonated, according to court records. Despite those red flags, Verizon still provided the sensitive data to Glauner.

Remarkably, in a text message to Poppy sent during the fallout of the data transfer, a Verizon representative told Poppy that the corporation was a victim too. “Whoever this is also victimized us,” the Verizon representative wrote, according to a copy of the message Poppy shared with 404 Media. “We are taking every step possible to work with the police so they can identify them.”

In the interview with 404 Media, Poppy pointed out that Verizon is a multi-billion dollar company and yet still made this mistake. “They need to get their shit together,” she said.

top 22 comments
sorted by: hot top controversial new old
[–] Poggervania@kbin.social 60 points 11 months ago

Bullshit, Verizon isn’t a victim at all - they fucked up, they should own up to their mistake instead of trying to go “me too!” to a situation where a stalker harassed their customer and their family after giving said stalker the customer’s personal information.

[–] Cosmicomical@kbin.social 29 points 11 months ago

“We are taking every step possible to work with the police so they can identify them.”

Yeah just make sure it's the actual police.

[–] AceFuzzLord@lemm.ee 19 points 11 months ago* (last edited 11 months ago) (1 children)

...a Verizon representative told Poppy that the corporation was a victim too.

Fuck off. You're all a bunch of idiots who didn't do an extremely quick search online to find an officer of that name in that area. Or at the very least call the police in that area to confirm said person isn't a fraudster! Large corporations need to stop gaslighting us into thinking that when they fuck up that they're victims!

[–] Catsrules@lemmy.ml 1 points 11 months ago (1 children)

To be fair if Poppy got killed they would have lost a customer and the income from that customer. How would they recover from that?

[–] AceFuzzLord@lemm.ee 1 points 11 months ago

Maybe they could stop eating avocado toast everyday and cut back on their starbucks orders?

[–] plain_and_simply@feddit.uk 18 points 11 months ago (1 children)

Seriously? What a stupid mistake to make. There should always be internal processes right?

[–] sqgl 2 points 11 months ago (1 children)

And now they will probably overcompensate with frustrating security theatre beyond sensible precautions.

[–] admiralteal@kbin.social 8 points 11 months ago (1 children)

I see no problem whatsoever with having frustrating levels of obtuse security required before complying with a request from law enforcement.

There is no downside.

[–] sqgl 1 points 11 months ago (1 children)

Maybe I am missing a joke, but why would a service provider need to jump through any security hoops to comply with a request from law enforcement?

[–] admiralteal@kbin.social 8 points 11 months ago* (last edited 11 months ago) (2 children)

You mean like... verifying it is a legitimate request from law enforcement? That kind of security hoop? Ensuring there is a warrant or subpoena? Ensuring proper security in transmitting the sensitive personal information?

Civil rights matter more than making cops' jobs easy.

[–] tiago 2 points 11 months ago

At a customer service job I had, everything was via email. Once, an alleged cop just wrote us that he "had a subpoena" and to please "send all the information we had on Mr. X".

The funniest part is as "proof" they attached the tiniest and blurriest .jpeg of a police badge saying that was their ID. That was more pixel art than anything.

We tagged it as Urgent, but it stayed unanswered (until I quit, at least). I wonder if this was what worked with Verizon, imma start downloading badger pictures!

[–] sqgl 1 points 11 months ago (1 children)

OK but that would be entirely different security questions from the ones they ask clients.

I was talking about how frustrating it gets for clients, eg for social security I am a nominee for my Mother. I have to verify details of myself (since I am also on SS) then give them a password for my access to Mum, then (this is the stupid part) give them the details of Mum.

It is entirely redundant by the last stage and it may just be theatre or they may be doing it to piss people off so that they get angry and so the SS agent has an excuse to hang up. In Australia they are notorious for making things difficult and the subject of a Royal Commission which determined they are guilty of illegal shitfuckery (although I don't think the RC used that term).

[–] TheOakTree 1 points 11 months ago (1 children)

Well the difference is, in this case it would be an increase in requirements in the situation that law enforcement requests information. I don't see how that, if implemented correctly, should affect the average person. Huge emphasis on that 'if.'

[–] sqgl 2 points 11 months ago (1 children)

Oh dear, I forgot the point of the article, sorry. The guy was pretending to be a police officer. Thank you everyone for being tolerant of me. I don't know if I should delete my comment now or not.

[–] TheOakTree 2 points 11 months ago (1 children)

We're mostly reasonable here, no problem. If anything, I agree with your sentiment that the red tape in front of many government services is weaponized to reject people service. It's definitely a problem and realistically, I could see a world where such failures of the system occur in most scenarios.

[–] sqgl 2 points 11 months ago* (last edited 11 months ago) (1 children)

Just today: they asked for [verification of] ID number, name, DOB, address.

But for the address they asked further...

AGENT: "...and the postcode please?"

ME: "Google it"

The agent must have seen the absurdity of the question and did not insist on a postcode.

[–] TheOakTree 1 points 11 months ago (1 children)

You would think a government system would be able to pull postcodes from addresses automatically, but...

[–] sqgl 1 points 11 months ago

She knew the postcode. It was a security question. My response was cheeky.

[–] JCreazy@midwest.social 17 points 11 months ago

I don't know how other people see it but the way I see it is if a company makes as much money as Verizon does then there is no excuse for this to happen. They have more than enough money to prevent this from happening tenfold but instead of investing money into the company CEOs get paid. With that being said, I believe that if there are any issues in a company, the CEO should be a 100% responsible. If they are going to get paid more money than anyone else than they should be doing more work than anyone else and if bad things are happening below them. That means they're not doing their due diligence.

[–] NaibofTabr@infosec.pub 15 points 11 months ago (1 children)

Verizon was also threatened with a knife.

[–] sqgl 8 points 11 months ago* (last edited 11 months ago)

The stalker probably assaulted them with a thumbs down on Twitter.

[–] ArugulaZ@kbin.social 12 points 11 months ago

She could tell it was Verizon's fault because the stalker kept calling her, asking, 'Can you hear me now?"