Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

github.com

Post reply on HN
Print view View original

211–220 of 363 posts

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#211

Post by lupire »

woadwarrior01 wrote: post #54
bredren wrote: post #9

Clubhouse requires contact list in order to get invites, which are required to sign up right now. I get why they are doing this, and it caused me to share my contacts with them. However, I resented it and it put me immediately in a defensive posture with the product and company. There is no possible way to trust a company with your contact list and Apple should make it how Photos works now--where you can select which…

I have an old iPhone with an empty address book for testing dodgy apps that require contacts access, I use that for sending Clubhouse invites. OTOH, Clubhouse seem work fine on my primary phone, where I haven't given it contacts access.

If your invitees don't also have a spare iPhone, what's the point of inviting them? They'll have the same problem with no workaround?

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#212

Post by cortesoft »

drclau wrote: post #156
msla wrote: post #134

Earlier quoted context omitted.

Countries or groups of countries don't get to impose their law on other countries. That's called colonialism, and Europe is supposed to have given it up.

I am not a lawyer, and I don't claim I understand the legal mechanisms involved. I don't even claim GDPR is perfect. But, as I see it, EU is protecting its citizens. If you want to do business with EU citizens you must abide by EU regulations. It's that simple. I don't get how this came to be all of a sudden about colonialism. Any business is free to stay out of EU.

And any EU citizen is free to not do business with a company outside the EU.

Do you think the EU laws should apply to people selling things to EU citizens while they are on vacation in other parts of the world? If someone from Germany travels to Brazil and buys something from a store, are they required to abide by EU rules?

If someone from the EU leaves the EU digitally to buy something in another country, it isn't up to the seller to enforce EU rules.

Unless you have an entity (either yourself or your business) under EU jurisdiction, you don't have to follow their rules.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#213

Post by heavyset_go »

carmen_sandiego wrote: post #36
Waterluvian wrote: post #21

Apps using contacts is a $#%$ing anxiety attack for me. The scum companies don't care. They just want more leads. But for me, it's this fear that they're going to spam my exes and old roommates and bosses and professors and landlords and everyone who ends up added to my contacts. Signal did that to me last week. This person I'm not on speaking terms with got Signal and it added us and announced to each other we were…

Not to be unkind but I suppose most people are not really traumatised by merely seeing someone's name, even if they're not on speaking terms with that person. It probably falls on the side of convenience for the vast majority. For the Signal org, it's possibly even an existential issue, since it helps them counter network effects in the incumbents. It's hard to expect them not to do it, then. Having said that, I thin…

> Not to be unkind but I suppose most people are not really traumatised by merely seeing someone's name, even if they're not on speaking terms with that person.

Domestic abuse, harassment/sexual harassment, stalking etc are all more common than they should be.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#214

Post by gabaix »

philwelch wrote: post #130
anonymousab wrote: post #103

Earlier quoted context omitted.

There's a slew of individual things that can be done. EU companies can be prevented from doing business with a (willfully) noncompliant company. Wire transfers going through the EU and other operations can be blocked. And, of course, the service itself, its apps, its sites, its traffic, can be blocked from accessing the EU internet (or being accessed from it). That's not even getting into international pressure lever…

> And, of course, the service itself, its apps, its sites, its traffic, can be blocked from accessing the EU internet (or being accessed from it). In other words, the EU can attempt to extend its internet regulations over the rest of the world by implementing a China-style firewall. Well, we'll see if that happens.

It is more akin to the US Sanctions. You don’t have to abide. If you do trade with sanctioned countries, you should not do any kind of business with the US, or pay a hefty penalty.

Here’s a case example, BNP Paribas dealings with sanctioned countries. https://www.wsj.com/articles/bnp-agrees-to-pay-over-8-8-bill...

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#215

Post by heavyset_go »

carmen_sandiego wrote: post #91
aboringusername wrote: post #73

Earlier quoted context omitted.

> but I suppose most people are not really traumatised by merely seeing someone's name I mean there are cases where that can be devastating . "Ohai here's your old abusive ex, here's a chat box just for good measure, good luck!". There are people who I'd never ever want to be within a textbox and tap away from accessing me, for any reason, period. You can get restraining orders in the physical world, the digital worl…

Well, a couple of things: (a) You can't take seeing their name, but you keep them in your contacts? Don't you occasionally scroll past it with a call button right there, which is just as easy to hit and put you in touch with them? How is this any different? Seems a bit silly. (b) As far as I know, research suggests hyper-avoidance is not a good way to resolve trauma. So I'm not convinced by the idea that this is harm…

> You can't take seeing their name, but you keep them in your contacts?

If I start getting abusive calls or texts from a usual suspect, I want to know who it is. My carrier-level number blocking resets every couple of years, and I cannot remember everyone's phone numbers.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#216

Post by tjpnz »

paulie_a wrote: post #105

Data poisoning needs to become a standard practice. Make the "valuable" ad data useless

From an economics perspective it seems like a more viable approach. Most of the techniques considered state of the art now are likely easily detectable by Google and other ad tech companies - they have a very good idea of which data can be safely discarded. Rather than blocking Google Analytics I wonder what would happen if browsers started responding with garbage.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#217

Post by Moru »

malka wrote: post #45
fiddlerwoaroof wrote: post #35

Earlier quoted context omitted.

If you’re not subject to the EU (I.e. don’t have any offices, servers, etc. in the EU) I don’t see how the GDPR is relevant: non-EU citizens generally aren’t subject to the laws of the EU.

Then you cannot have ue customers. Or make wire transfer through the ue.

You can also forget vacation trips in EU.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#218

Post by [deleted] »

satya71 wrote: post #155
bredren wrote: post #9

Clubhouse requires contact list in order to get invites, which are required to sign up right now. I get why they are doing this, and it caused me to share my contacts with them. However, I resented it and it put me immediately in a defensive posture with the product and company. There is no possible way to trust a company with your contact list and Apple should make it how Photos works now--where you can select which…

Here's how to get around Clubhouse uploading contacts. We shouldn't have to do this, but here we are. 1. Disable contacts for all your configured accounts 2. Add a dummy Gmail account, enable contacts. 3. Add invitee to dummy account 4. Give contacts access to Clubhouse 5. Send invite 6. Remove contact access 7. enable contacts disabled in 1

[deleted]

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#219

Post by mattmanser »

fiddlerwoaroof wrote: post #49
ekianjo wrote: post #42

Earlier quoted context omitted.

If some of your users are in the EU you need to be GDPR compliant.

This is what the law says, but I don’t understand how this is expected to work: without some kind of treaty from the US government, the EU has no way to make US companies comply.

Have you not heard of extradition treaties?

For example, that's what the US is using on Kim Dotcom.

Re: Fake_contacts: Android app to create fake phone contacts, to do data-poisoning

#220

Post by bredren »

ccleve wrote: post #113

This is a common technique in the mailing list industry. It's called "salting". You add fake names, but real email addresses, street addresses, or post office boxes. You then monitor what shows up in these places addressed to "Mr. Fake Name". It's how mailing list companies monitor who is using their lists and helps control misuse.

Have you worked in this industry? Curious about more details of tricks from various list makers/sellers.
Post reply on HN