Hot answers tagged

5

You open yourself up to the possibility of receiving spear-phishing calls, texts, emails, and so on. This information could be used by an attacker to impersonate you as part of a social engineering attack against, for instance, a call center employee at your phone company in order to gain more information about you (date of account registration, address ...


2

It makes no sense to keep information secret if they are trivially and cheaply obtainable by others anyway. For everything else somebody has to put some non-trivial effort and/or costs into collecting and associating such information. Due to this it will only be done if the expected return at least matches the efforts and costs needed to obtain such ...


1

Of course, a lot of things like that will come down to trust. You either have to completely trust Bravo to not do any harm (intentional or accidental), or you could assume everything is compromised. Depending on how access was granted to Bravo, you may want to take steps to secure your account, such as verifying personal details and changing your password. ...


1

It really depends on the nature of the website. If the site already shows the username on other places (like here on this site) then it probably isn’t PII. If the username is show nowhere else, then it might be considered PII. That being said, why is the username exposed in the url for an edit (apart from being the default for certain frameworks)? ...


Only top voted, non community-wiki answers of a minimum length are eligible