Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

github.com

Post reply on HN
Print view View original

121–130 of 363 posts

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#121

Post by jtsiskin »

koboll wrote: post #97
antipaul wrote: post #86

Earlier quoted context omitted.

App Store guidelines forbid using the Contacts for anything except the intended purpose: https://appleinsider.com/articles/18/06/12/apple-disallows-d... Do we give CH the benefit of the doubt =p ? In any case, I also hope (and expect) Apple to implement better controls for sharing contacts. EDIT: Typo

Huh, so Clubhouse is explicitly breaking Apple's rules. Surely Apple knows this, but is allowing it because... it's mega-popular? What's the point of having rules if clawing your way to popularity by leveraging their violation is deemed permissible?

How are they breaking the rules? It seems like they are using it for the same purpose they prompt permissions for.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#122

Post by rzzzt »

vmception wrote: post #37
rzzzt wrote: post #13

Earlier quoted context omitted.

It is like signing up with an e-mail +suffix for services, or the non-existent streets on digital maps; if you come across your fake contact elsewhere, you know that information has been shared.

it is trivial to strip suffixes off of aliased email addresses

What is the equivalent to that in the fake phone contacts domain? I guess removing people with the +21 country code would work for this particular approach, but otherwise...?

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#123

Post by 177tcca »

vinay_ys wrote: post #104
JMTQp8lwXL wrote: post #30

Earlier quoted context omitted.

It's disingenuous of them to say they "have to" do contact upload. Why can't I type in a phone number to invite? Completely hostile. Consequently, I have invited nobody.

Same here. It also seems to burn through battery more quickly than other apps.

An app that recreates party lines on POTS burning through battery is unfortunately unsurprising!

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#124

Post by wuuza »

Answerawake wrote: post #94
techsupporter wrote: post #76

Earlier quoted context omitted.

I've noticed a bunch of spammers starting to strip out anything after the + and before the @. This is why I've long used a catch-all e-mail domain (subdomain.example.net) where I can put anything I want to the left of the @ sign and no one is the wiser for my real e-mail address.

Is there some service where I can easily create unlimited custom email addresses for a flat monthly fee? I want to use a unique email for each new website/service. That would go a long way to solving some data leak/privacy problems. The problem with custom domain is I have to maintain it right? I want a service which I don't have to maintain. I used to use new Yahoo accounts but they are a hassle and recently they di…

spamgourmet.com

I have been using this since 2002. You don't even have to set anything up - just make up addresses on the fly. It's pretty awesome.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#125

Post by ganstyles »

post_break wrote: post #17
bredren wrote: post #9

Clubhouse requires contact list in order to get invites, which are required to sign up right now. I get why they are doing this, and it caused me to share my contacts with them. However, I resented it and it put me immediately in a defensive posture with the product and company. There is no possible way to trust a company with your contact list and Apple should make it how Photos works now--where you can select which…

I mean this is why they do it. You knew it was wrong, you knew they were going to take that data and mine it, and you still said sure.

Correct. I've been a member for going on a year now and I have scores of invites I don't appear to be able to send because I won't share my contacts. Not that I care enough to invite people, but it's a dark pattern to even require it.

I have heard there's a way to share invites without sharing contacts, but I haven't cared enough to even do a cursory search on that.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#126

Post by kzrdude »

post_break wrote: post #17
bredren wrote: post #9

Clubhouse requires contact list in order to get invites, which are required to sign up right now. I get why they are doing this, and it caused me to share my contacts with them. However, I resented it and it put me immediately in a defensive posture with the product and company. There is no possible way to trust a company with your contact list and Apple should make it how Photos works now--where you can select which…

I mean this is why they do it. You knew it was wrong, you knew they were going to take that data and mine it, and you still said sure.

They do it because all the successful social apps need to make contact discovery easy. The ones that don't use this trick - ethical - we don't hear so much about, maybe they don't succeed.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#127

Post by [deleted] »

Answerawake wrote: post #94
techsupporter wrote: post #76

Earlier quoted context omitted.

I've noticed a bunch of spammers starting to strip out anything after the + and before the @. This is why I've long used a catch-all e-mail domain (subdomain.example.net) where I can put anything I want to the left of the @ sign and no one is the wiser for my real e-mail address.

Is there some service where I can easily create unlimited custom email addresses for a flat monthly fee? I want to use a unique email for each new website/service. That would go a long way to solving some data leak/privacy problems. The problem with custom domain is I have to maintain it right? I want a service which I don't have to maintain. I used to use new Yahoo accounts but they are a hassle and recently they di…

[deleted]

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#128

Post by TedDoesntTalk »

bredren wrote: post #9

Clubhouse requires contact list in order to get invites, which are required to sign up right now. I get why they are doing this, and it caused me to share my contacts with them. However, I resented it and it put me immediately in a defensive posture with the product and company. There is no possible way to trust a company with your contact list and Apple should make it how Photos works now--where you can select which…

I mean, unless you're a newbie to the internet, how is this possible?

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#129

Post by aeternum »

rsync wrote: post #53
otterley wrote: post #32

Recently Apple added a feature to iOS that allows you only to allow selected photos to be accessible by an app. This allows the user to respond positively to an access request, but allow the app to see only a subset (or zero) actual photos. It would be a very useful feature for Apple to do the same for contacts: the app would think it's getting access to your contacts, but would only actually receive a subset of them…

"Recently Apple added a feature to iOS that allows you only to allow selected photos to be accessible by an app." What we really need to see from Apple is a permissions index in the app store that allows me to inspect, and consider, the permissions that an app will request before installing that app . I shouldn't have to install the app (or do laborious research online) to discover what permissions it will attempt to…

I'm not sure the permission index would be very useful.

Most iPhone chat apps for example work perfectly fine with zero permissions granted yet provide the option to send pictures, invite contacts, use mic/camera, send gps location, etc if a user is so inclined. With a permissions index, you would likely end up with the majority of apps listing all permissions and users would simply ignore it.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#130

Post by philwelch »

anonymousab wrote: post #103
fiddlerwoaroof wrote: post #49

Earlier quoted context omitted.

This is what the law says, but I don’t understand how this is expected to work: without some kind of treaty from the US government, the EU has no way to make US companies comply.

There's a slew of individual things that can be done. EU companies can be prevented from doing business with a (willfully) noncompliant company. Wire transfers going through the EU and other operations can be blocked. And, of course, the service itself, its apps, its sites, its traffic, can be blocked from accessing the EU internet (or being accessed from it). That's not even getting into international pressure lever…

> And, of course, the service itself, its apps, its sites, its traffic, can be blocked from accessing the EU internet (or being accessed from it).

In other words, the EU can attempt to extend its internet regulations over the rest of the world by implementing a China-style firewall. Well, we'll see if that happens.

Post reply on HN