upvote

points

by stymaar1 days ago |
comments
upvoteby vintermann1 days ago|
next
[-]
They did not leak their database, the attacker guessed some user passwords and scraped those people's match lists.

I don't think they even got their hacked user's test results - you can download those from 23andMe, as GDPR requires, but it's a "request your data" process which isn't so easy to do at scale without people noticing.

23andMe is also not NGS sequencing, so you get only a couple of 100000 letters randomly* distributed across your whole genome.

reply
upvoteby jefftk1 days ago|
parent|
[-]
I know you put an asterisk, but to make it clear: these locations are very far from random. They're the most informative positions, which is why we check them.
reply
upvoteby vintermann1 days ago|
parent|
[-]
Well, they're what 23andMe thinks are most informative, for the things they think their customers care about. Or thought; for compatibility reasons they can't change their SNP panels very often or too much.

And the interesting positions are still reasonably randomly distributed by nature :)

reply
upvoteby bonsai_spool1 days ago|
parent|
next
[-]
I don't do SNP design but I don't think 23andMe made their own chips at first (if they have ever). SNPs are chosen based on being informative for population discrimination, with traits being overlaid afterwards
reply
upvoteby vintermann1 days ago|
parent|
[-]
I could be wrong, but I do believe they get to choose. What I do know is that none of the big testing companies test exactly the same SNPs, there is some overlap but every test is different. They also change their SNP sets from time to time, 23andMe has changed at least 5 times, and interestingly, their current test isn't the biggest (it tests fewer SNPs than some of their earlier ones).
reply
upvoteby doctorpangloss1 days ago|
parent|
prev|
[-]
well SNPs aren't useful for drug development, commercialization, medicine, etc. you want whole genome or whole exome sequencing for stuff that is future-looking. they use a process for the present day (quickly becoming the past) of okayish drugs instead of sequencing for a future of cures.
reply
upvoteby neoden1 days ago|
prev|
[-]
what is the attack vector btw?
reply
upvoteby saxonww1 days ago|
parent|
next
[-]
Finding yourself in a genetically-determined out group, and being treated differently / discriminated against because of it.
reply
upvoteby Noaidi1 days ago|
parent|
[-]
Honestly, you don't need someone's genetics for this to happen. They will find out more about you by scraping your socials and spending habits and driving habits.

I think this whole fear is over blown anyway. I am in a genetic out group (schizoaffective disorder and yes my risk is genetic) and the benefits of getting my genetics run twice out weighed any risk that might have befallen me.

reply
upvoteby saxonww1 days ago|
parent|
next
[-]
It's overblown _right now_ because this information is not broadly available. The fear is that pervasive access to this data would lead to e.g. you or your partner not getting insurance to pay for anything fertility-related, or you not getting hired for a job you want despite being otherwise qualified, or even that <insert authority> is less inclined to take you seriously because their perception of what schizoaffective means makes them think your perception of reality can't be trusted.

Of course if you just go tell everyone you are or are at high risk of being schizoaffective, you've done it to yourself. Not having a bad outcome yet doesn't mean that a bad outcome is not now more likely.

reply
upvoteby Noaidi19 hours ago|
parent|
[-]
I am homeless currently living with schizoaffective disorder (and OCD) by myself because no one wants to take care of people with mental illness so I have zero to lose.

My nephew died by suicide, I tried my mother and my brother tried. A whole family of pretty evident genes.

reply
upvoteby 1 days ago|
parent|
prev|
next
[-]
deleted
reply
upvoteby graemep1 days ago|
parent|
prev|
[-]
You have control over your habits, and what you reveal on your "socials". I post very little personal.

You have no control over your genes.

reply
upvoteby vintermann1 days ago|
parent|
next
[-]
23andMe bet big that genetic big data would be super valuable. That really didn't work out for them.

It turns out that it's more valuable for advertisers to learn if you actually smoke, than that you have a genetic propensity for smoking. Your genotype is just useful for figuring out your phenotype, and in the vast majority of cases, your genetics (especially not at the resolution offered by 23andMe) are not a shortcut to learn your behavior, which is what they're really after.

You're probably already classed as some variety of paranoid/dissident for your careful social media preferences...

reply
upvoteby Noaidi1 days ago|
parent|
prev|
[-]
> You have control over your habits

If you have to change your habits because a secret system is watching over you it means they are already controlling you.

You cannot hide your bank account, where you drive, what you buy, and on and on and on.

And all I need to get your DNA is pick up a cup you drank from or go through your garbage.

reply
upvoteby Self-Perfection1 days ago|
parent|
prev|
[-]
That gives some probabilistic info to scraper. Like person might have genes that are: - susceptible to drugs abuse - or game addiction Bam - you get target ads

- Indicate that any common substance is especially dangerous/harmful for him (think of allergies). So attacker might plan assassination or severe inconvenience by exposure to the substance and then claim he did not know

reply
upvoteby stymaar11 hours ago|
parent|
[-]
> That gives some probabilistic info to scraper. Like person might have genes that are: - susceptible to drugs abuse - or game addiction Bam - you get target ads

Or even more likely: “your insurance premium has now increased”, “your credit score is now degraded”.

reply