Yet another Elasticsearch server wide open. This is going to make the flurry of open mongodb servers look trivial.
It's not hard to secure ES. If people need help, please just ask, happy to help.
Personal and social information of 1.2B people discovered in data leak
41–50 of 440 posts
Re: Personal and social information of 1.2B people discovered in data leak
#42Can I do a GDPR request for the data about myself? How?
>Can I do a GDPR request for the data about myself? How? And send it where? It's unclear who owns this server
Google are jointly liable for this service, so if you can't find a contact point, then you can email google with the service IP. They will more than happily point you on to the customer to avoid being taken to court.
Re: Personal and social information of 1.2B people discovered in data leak
#43Seems like the ball is with Google at the moment, the exposed data is on their GCP servers. So, they can figure out next steps.
Imagine the equivalent in another industry:
“Hello, Bank of America? There’s an ATM machine of yours that’s spitting out cocaine.
Yes, I understand that it’s probably not your cocaine and that’s not your business, but don’t you think you should maybe shut it down?”
Re: Personal and social information of 1.2B people discovered in data leak
#44does anyone know how we can search the data to find info about our (more than likely) entries in this database? or did they simply find it but not release the info?
Not the aggregate data set, but one of the two data sources (People Data Labs) offers free access for under 1,000 searches per month.
Re: Personal and social information of 1.2B people discovered in data leak
#45Firefox monitor can tell you if your information was leaked in data breaches. I don't think they have this data set though. https://monitor.firefox.com/
Highly recommended. You can put in multiple email addresses, so you can help monitor your non-technical family members’ info as well.
At this point practically everything about me's available either for free or a few dollars. The only interesting thing left is whether a given password has been compromised. The answer to everything else is "yes, it's been leaked". Been that way for most of a decade at this point, guessing it's the same for most other folks with any modern digital or banking presence whatsoever.
Re: Personal and social information of 1.2B people discovered in data leak
#46Genuinely hope somebody goes to prison for this, but not gonna hold my breath.
Re: Personal and social information of 1.2B people discovered in data leak
#47Out of curiosity how do you guys think they managed to scrape LinkedIn on such a large scale? I've been wanting to do some social graph experimentation on it (small scale - say 1000 people near me) but concluded I probably couldn't scrape enough via raw scraping without freaking out their anti-scraping. (And API is a non-starter since that basically says everything is verboten).
A very large distributed network of machines.
Re: Personal and social information of 1.2B people discovered in data leak
#48I found a vulnerability in linkedIn a few years back that allowed anyone to access a private profile (because client side validation was enough for them I guess..?)
They didn't take my report seriously (still not completely patched) and I feel like that told me all I needed to know about their security practices.
Re: Personal and social information of 1.2B people discovered in data leak
#49Earlier quoted context omitted.
It's weird because for oxydata you have to contact their sales team... but peopledatalabs has an opt out form. https://www.peopledatalabs.com/opt-out-form People Data Labs privacy policy: 3. ACCESS TO AND CONTROL OVER INFORMATION A person may do any of the following at any time by contacting People Data Labs at support@peopledatalabs.com. People Data Labs will reply to a person’s request within five business days. A.…
I want someone to start an opt-out service, where I send them $20, and they send a book of names by registered mail for opt-outs every month. An online opt-out system is too easy for them. I want each one to get a phone-book sized list of opt-outs every month. And the same for data requests. Someone that curates the data collectors, and sends them requests every month. Do you know which country’s “do not call” list I…
> I want someone to start an opt-out service, where I send them $20, and they send a book of names by registered mail for opt-outs every month
This exists but it's not cheap: https://www.abine.com/deleteme/
Re: Personal and social information of 1.2B people discovered in data leak
#50People data labs's data is pretty accurate. Here is mine: https://api.peopledatalabs.com/v4/person?api_key=9c6a1382204... You can try it for yourself by changing the email. All of the information is public, so I don't mind. They are basically doing data integration.
I'm glad they don't have jack shit on me besides my email, is there a list of their data source(s) ?