Live data from Hacker News

Ask HN: Have you ever been contacted to sell your user's information?

news.ycombinator.com

21–30 of 43 posts

Re: Ask HN: Have you ever been contacted to sell your user's information?

#21

I've never been contacted but here is a #lifehack if you use gmail sign up with youremail+domain to track who is selling your info.

Yeah, if you ignore the corollary #shadybusinesshack, which is to strip + suffixes from @gmail.com addresses, or any other domain with gmail MX records.

Slightly more advanced trick is exploiting the fact that Gmail ignores . in addresses, so that first.last@gmail.com, firstlast, fi.rst.la.st, firstlast.., are almost infinitely unique encodings of the same mailbox. But again, smart spammers can just remove all dots so that the spammee can't tell who sold the address.

Re: Ask HN: Have you ever been contacted to sell your user's information?

#22

Haha that's not dodgy at all. There is a legitimate business around selling data; This is OK in 3 scenarios I can think offhand: 1) A company collects personal/contact information on behalf of another and is upfront about this at collection 2) A company contacts their list asking if these people would like to share their information with a company 3) Permission to sell information is in the T&C on sign-up of the orig…

This assumes you have only US citizen's data. One Canadian in there for example and you're surely breaking the law.

Re: Ask HN: Have you ever been contacted to sell your user's information?

#23

I've never been contacted but here is a #lifehack if you use gmail sign up with youremail+domain to track who is selling your info.

Yeah, if you ignore the corollary #shadybusinesshack, which is to strip + suffixes from @gmail.com addresses, or any other domain with gmail MX records. Slightly more advanced trick is exploiting the fact that Gmail ignores . in addresses, so that first.last@gmail.com, firstlast, fi.rst.la.st, firstlast.., are almost infinitely unique encodings of the same mailbox. But again, smart spammers can just remove all dots s…

[deleted]

Re: Ask HN: Have you ever been contacted to sell your user's information?

#24

Haha that's not dodgy at all. There is a legitimate business around selling data; This is OK in 3 scenarios I can think offhand: 1) A company collects personal/contact information on behalf of another and is upfront about this at collection 2) A company contacts their list asking if these people would like to share their information with a company 3) Permission to sell information is in the T&C on sign-up of the orig…

This assumes you have only US citizen's data. One Canadian in there for example and you're surely breaking the law.

[deleted]

Re: Ask HN: Have you ever been contacted to sell your user's information?

#25

Haha that's not dodgy at all. There is a legitimate business around selling data; This is OK in 3 scenarios I can think offhand: 1) A company collects personal/contact information on behalf of another and is upfront about this at collection 2) A company contacts their list asking if these people would like to share their information with a company 3) Permission to sell information is in the T&C on sign-up of the orig…

This assumes you have only US citizen's data. One Canadian in there for example and you're surely breaking the law.

I don't see why. Could you shed light on this view?

Re: Ask HN: Have you ever been contacted to sell your user's information?

#27

Earlier quoted context omitted.

Yes and some websites refuse + in email.

That would be preferable to what happened to me once. I tried using a + filter and it was accepted but I never received booking information for my trip. When my trip was getting closer I realized I didn't have a confirmation number, and after a long conversation with customer service, it turned out that instead of " + @gmail.com" my email address was saved as " @gmail.com", so nothing ever made it through to me.

I'll bet that's a URL-decoding bug -- space gets encoded as plus, so if they decoded an extra time your plus would turn into a space. I've made that mistake a few times myself.

Re: Ask HN: Have you ever been contacted to sell your user's information?

#28

Earlier quoted context omitted.

This assumes you have only US citizen's data. One Canadian in there for example and you're surely breaking the law.

I don't see why. Could you shed light on this view?

It's illegal to sell user data without explicit consent in a lot of countries. It should also be illegal in the US tho due to the Fair Information Practices.

Re: Ask HN: Have you ever been contacted to sell your user's information?

#29

Earlier quoted context omitted.

I don't see why. Could you shed light on this view?

It's illegal to sell user data without explicit consent in a lot of countries. It should also be illegal in the US tho due to the Fair Information Practices.

What is defined as explicit consent? Most terms of service and EULAs on websites and software do explicitly give the company the right to sell your data.

Also aren't the FTC's Fair Information Practices just recommendations with no consequences for violating?

Re: Ask HN: Have you ever been contacted to sell your user's information?

#30

I've never been contacted but here is a #lifehack if you use gmail sign up with youremail+domain to track who is selling your info.

Even better if you run your own mail server, have it use . as the suffix character instead of + e.g. you+comcast@domain.com becomes you.comcast@domain.com

This evades sites that filter on +'s and spammers that strip them out to anonymize their list. Also if they strip out the dots to further anonymize it, they just create invalid email addresses.

Admittedly this only works because not everyone does it.

Post reply on HN