Live data from Hacker News

Personal and social information of 1.2B people discovered in data leak

dataviper.io

11–20 of 440 posts

Re: Personal and social information of 1.2B people discovered in data leak

#11

This is all scrapped public social media data. No credentials or govt information. It's very easy to download or buy this data legally.

It appears to also contain information possibly acquired from other companies. For example, the author notes that he had attributed to him a phone number he had assigned to him by AT&T that he never used or shared.

Re: Personal and social information of 1.2B people discovered in data leak

#12
post #2

Can I do a GDPR request for the data about myself? How?

It's weird because for oxydata you have to contact their sales team... but peopledatalabs has an opt out form.

https://www.peopledatalabs.com/opt-out-form

People Data Labs privacy policy: 3. ACCESS TO AND CONTROL OVER INFORMATION A person may do any of the following at any time by contacting People Data Labs at support@peopledatalabs.com. People Data Labs will reply to a person’s request within five business days.

A. Access any information we have on them, if any.

B. Change, correct, or delete any information we have them, if any.

C. Express any concerns about People Data Labs using their information.

People Data Labs' team will act swiftly upon a person’s email request to change, correct, provide, delete, or explain anything a person query.

People Data Labs understands if a person would like to opt out of People Data Labs' database. Opting out will stop all data sharing and enriching of all PII in People Data Labs servers for that person. Click here, if you would like to opt-out, or choose to have all data about you removed from People Data Labs' database.

For https://www.oxydata.io/: Review and changes to your information Contact us at sales@oxydata.io to find out what information we have collected about you, and to request any changes to or deletion of it.

Re: Personal and social information of 1.2B people discovered in data leak

#13
post #5
post #2

Can I do a GDPR request for the data about myself? How?

>Can I do a GDPR request for the data about myself? How? And send it where? It's unclear who owns this server

Seems like OxyData and PDL directly have more up-to-date records anyway.

Could the server owner (Google) have to fulfill the request? Probably not, but interesting to think about.

Re: Personal and social information of 1.2B people discovered in data leak

#16
post #8
post #5

Earlier quoted context omitted.

>Can I do a GDPR request for the data about myself? How? And send it where? It's unclear who owns this server

People Data Labs?

From the article it seems that you can just create a free account and query your own name.

> In order to test whether or not the data belonged to PDL, we created a free account on their website which provides users with 1,000 free people lookups

Re: Personal and social information of 1.2B people discovered in data leak

#17
Out of curiosity how do you guys think they managed to scrape LinkedIn on such a large scale?

I've been wanting to do some social graph experimentation on it (small scale - say 1000 people near me) but concluded I probably couldn't scrape enough via raw scraping without freaking out their anti-scraping. (And API is a non-starter since that basically says everything is verboten).

Re: Personal and social information of 1.2B people discovered in data leak

#19
post #12
post #2

Can I do a GDPR request for the data about myself? How?

It's weird because for oxydata you have to contact their sales team... but peopledatalabs has an opt out form. https://www.peopledatalabs.com/opt-out-form People Data Labs privacy policy: 3. ACCESS TO AND CONTROL OVER INFORMATION A person may do any of the following at any time by contacting People Data Labs at support@peopledatalabs.com. People Data Labs will reply to a person’s request within five business days. A.…

I want someone to start an opt-out service, where I send them $20, and they send a book of names by registered mail for opt-outs every month.

An online opt-out system is too easy for them. I want each one to get a phone-book sized list of opt-outs every month.

And the same for data requests. Someone that curates the data collectors, and sends them requests every month.

Do you know which country’s “do not call” list I want to be on? All of them! Get my number on the AU list, the UK list, the DE list...

Let’s crash the system.

Re: Personal and social information of 1.2B people discovered in data leak

#20
post #4

Yet another Elasticsearch server wide open. This is going to make the flurry of open mongodb servers look trivial.

They're everywhere. Just ask Shodan.

> Shodan is a search engine that lets the user find specific types of computers connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.

Interesting.

Post reply on HN