Live data from Hacker News

Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

news.ycombinator.com

171–180 of 256 posts

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#171
post #42

Earlier quoted context omitted.

> There is no such public list. Most of these companies are privately held, their methods are trade secrets, and there is no real form of legal recourse. How can there not be a public list of these data miners? When e.g. a court needs to control someone's information surely they know who these people are and they can let them know? Is there a secret list in every courthouse or something? Or when someone wants to star…

a court needs to control someone's information surely they know who these people are and they can let them know? I think you have a misunderstanding of what a US court can do. A court can only tell a specific party to take some action, and generally only if that party is somehow related to the legal action (such as being a defendant). Generally, there is no judgement that a court can make that can effect unnamed part…

If there are many companies, surely it would be in their interests to leak one another for competitive advantage?

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#172
Take a look at this (2015) pic of the landscape: https://www.slideshare.net/RaviralaKarunakar/luma-display-ad...

The companies you are interested in are in "DMP & Data Aggregators" and "Data Suppliers" section.

But this is only the largest, best known companies. There are many, many more.

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#173
post #152
post #55

If you have your own domain name with a wildcard, it's really helpful to enter: someservice@mydomain.com as your email. That way if it leaks you'll know who did it and can setup much more robust rules to block. I'll use the domain name as the main address so I remember which name goes to which site. For physical address mailings, you can hyphenate (or use a middle name) as the service. So First Service-Last as the ad…

I just started doing the wildcard domain thing last month, I'm happier knowing that I can shut the taps. I get annoyed just knowing that there's spam in my spam list. First time I was on the phone with a customer service rep. after using the @ .com format I was asked if i was sure my email address was correct. I lol'ed and told them not to worry about it.

I use random 20 char string for the local part. That way there's no question about the leak. Spammers use a lot of dictionary words in the local part of the email address, so it's better to have a random string. If you're using password manager anyway, there's no reason not to make email/username random too.

For smaller e-shops you might find some with actively exploited 0days this way. I did.

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#174
post #65

Earlier quoted context omitted.

> So what happens when there is a high profile case and the court fears for the jurors' lives? Jurors' identities are not generally a secret.[0] There are exceptions, but those exceptions do not extend to wiping that person's data from things like pharmacy and gas station reward card databases. Honestly your entire premise shows a lack of understanding of how the criminal justice system works. > Are you literally say…

> Jurors' identities are not generally a secret.[0] There are exceptions I was talking about the exceptions. If there are exceptions, a way to handle them must exist, is all I was saying. > but those exceptions do not extend to wiping that person's data from things like pharmacy and gas station reward card databases. I was asking about the companies who obtain this original information, not pharmacies' or gas station…

> I was talking about the exceptions. If there are exceptions, a way to handle them must exist, is all I was saying.

There is. They put them in a hotel, under police guard, for the duration of the trial. https://en.wikipedia.org/wiki/Jury_sequestration

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#175

I've had the misfortune to be present for an in-person demo of a verification service nearly a decade ago. It involved those relationship questions ("Which one of the following people have you not lived with in the last 5 years?") that are incredibly creepy. I was shocked that they had so much data on me -- I have no debt, no credit cards, no house, no car, no bills, and I had always entered informal rent agreements…

Temporary postal mail forewards.

USPS NCOA (Change of Address) file is another major data source.

https://www.forbes.com/sites/adamtanner/2013/07/08/how-the-p...

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#176

You mean data brokers ( https://en.wikipedia.org/wiki/Information_broker ) Top US brokers: - Acxiom - Experian - Epsilon - CoreLogic - Datalogix - eBureau - ID Analytics - inome - PeekYou - Rapleaf - Recorded Future Protip: loyalty/reward cards are a gold mine, especially drug store purchase receipt data

When I signed up for a major grocery store rewards card, I was able to put a bogus name on the form. How can they correlate my purchases with me specifically? Can they correlate the charges to my credit card with the times the rewards card was used?

(This grocery store did not have a pharmancy)

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#177
post #55

If you have your own domain name with a wildcard, it's really helpful to enter: someservice@mydomain.com as your email. That way if it leaks you'll know who did it and can setup much more robust rules to block. I'll use the domain name as the main address so I remember which name goes to which site. For physical address mailings, you can hyphenate (or use a middle name) as the service. So First Service-Last as the ad…

You can do this with gmail. For example if your gmail is root@gmail.com You can do root+yahoo@gmail.com, root+reddit@gmail.com and such on.

It's relatively easy to use regular expressions to strip that out though. I set up a catch all for my domain, and give each entity it's own unique addy to guard against this.

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#178
post #176

You mean data brokers ( https://en.wikipedia.org/wiki/Information_broker ) Top US brokers: - Acxiom - Experian - Epsilon - CoreLogic - Datalogix - eBureau - ID Analytics - inome - PeekYou - Rapleaf - Recorded Future Protip: loyalty/reward cards are a gold mine, especially drug store purchase receipt data

When I signed up for a major grocery store rewards card, I was able to put a bogus name on the form. How can they correlate my purchases with me specifically? Can they correlate the charges to my credit card with the times the rewards card was used? (This grocery store did not have a pharmancy)

Credit card or check payments will link records.

Cellphone or MAC tracking.

In the near future if not already, facial recognition.

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#179
post #96

Easy one is they scrape Google for Linkedin bio info. I'm paranoid that USPS sells your info once you fill out their change of address form.

You're not paranoid, I don't know if money changes hands but my changes of address have 100% been accompanied by spam snail mail. I just don't change my mailing address anymore.

Money does in fact change hands.

Re: Ask HN: Who really gives your personal info to Intelius, Instant Checkmate, etc?

#180

Earlier quoted context omitted.

You mean like this? http://www.nationalchangeofaddress.com/

WTF. So if Intelius has your address, they can pay the USPS to get your new address. That incentivizes me not to fill out that darn form.

Request a temporary forward. Up to 12 months.
Post reply on HN