491–500 of 524 posts
Earlier quoted context omitted.
What Facebook user id is Mark? Is it #1?
No, nobody has 1-3. It starts at 4,5 & 6 who are the founders: - Mark Zuckerberg is 4: https://www.facebook.com/profile.php?id=4 - Chris Hughes is 5: https://www.facebook.com/profile.php?id=5 - Dustin Moskovitz is 6: https://www.facebook.com/profile.php?id=6 More info: https://tomanagle.medium.com/why-4-0-will-show-mark-zuckerbe...
We should start thinking of these breaches in terms of their accumulated impact. It's not the 1990s anymore, where data is difficult to store and networking too slow to move it. We should assume the leaked data doesn't go away; that instead people out there are consolidating Equifax data with Vastaamo data, adding data from Exchange hacks and the Accellion hack, to cross-reference with data from Facebook... it's like…
Earlier quoted context omitted.
This is why I don't use my real phone number with apps and HATE apps using phone numbers as a proxy for a user id. Get a virtual phone number if any service requires a phone number from you. Don't submit to this nonsense.
It's not about the information you give, it's all those friends and family who signed up for it and uploaded their address book... They now have your phone number and email probably your date of birth, and even some photos of you. They are like the credit companies, they have information on you whether you allow them to or not.
Hmm, not many of my friends have my phone number either. I don't usually use phone with friends. Come to think of it I almost never use phone, I always use FB, WeChat, LINE, Hangouts, etc. for voice calls, and sometimes just use a straight up WebRTC call.
I suppose one way to alleviate this for the masses is that when giving your number to a friend, have them use a pseudonym that is easy to remember for them and not use your real name.
I mean, at this point I think everyone should just accept that at the very least their name, age, address(es), email(s), phone number(s) and screen name(s) have been fully leaked if you have ever had any kind of online presence. Not saying that's right or good, but at this point it's just a fact. So if that's the case, I think we should move beyond really even trying to think of this info as private or a marker of id…
The problem is completely the opposite. The flaw is the existence of social security numbers. Prohibit them from being used for anything but social security. Then there is no "your social security number" or "your identity" for someone to open a bank account against. You open a bank account and they give you a bank card and you set an address and phone number. The day you open it, they shouldn't need to know who you…
For example
123 Main St. Apt 45-WXYZ
Where "WXYZ" is different for each business, to pollute any data mining algorithms trying to collate my address across sites. In some cases when they use address resolving functions, it also helps to spell out your address e.g.
123 Main St. Apt FOURTY_FIVE WXYZ
I mean, at this point I think everyone should just accept that at the very least their name, age, address(es), email(s), phone number(s) and screen name(s) have been fully leaked if you have ever had any kind of online presence. Not saying that's right or good, but at this point it's just a fact. So if that's the case, I think we should move beyond really even trying to think of this info as private or a marker of id…
The scary thing is how much ones phone number (a somewhat ephemeral thing) is actually bound to your IDENTITY. Considering your phone number is more and more being used in 2FA ... if you were to ever change your number and someone else got it, this would pose a serious security risk if you failed to change over ALL of your internet accounts 2FA to the new number.
Lesson: Don't use your phone number for 2FA. Get a bunch of virtual numbers and redirect their SMS to your e-mail.
If U2F or TOTP is an option, use it. And use a physical key for TOTP, not some Google or Microsoft authenticator.
Earlier quoted context omitted.
That is exactly how I deal with it. I use a throwaway webmail address and a Google Voice number. No way they're getting my real email or phone number that I use for work and clients.
You're not avoiding having a shadow account created about you though, once I've upload my contact list and you're right there, Jim Wyclif, with your real phone number, and I've also tagged you in a photo we took together last year. And then there are all the other people who have your real phone number and who have been on Facebook, Messgenger, Instagram, or WhatsApp since they saved the number. And then there's even…
I mean, at this point I think everyone should just accept that at the very least their name, age, address(es), email(s), phone number(s) and screen name(s) have been fully leaked if you have ever had any kind of online presence. Not saying that's right or good, but at this point it's just a fact. So if that's the case, I think we should move beyond really even trying to think of this info as private or a marker of id…
Well, I think at this point we can conclude that companies will not be good shepherds of our should-be-private data if we don't incentivize them to. Who'd have guessed? I appreciate the pragmatic stance you take, and we should definitely move to more robust identification methods. But making this case for better ID tech should IMHO not be confused with giving facebook and the others a pass. This should never have hap…
Earlier quoted context omitted.
This. I don't trust in the government, but I think digital "personal data" should be only available for "confirmation" to companies that need it. Say, a government entity could have an API that allow you to send hashed personal data that they can verify is right. This way companies will ask the user for their data and hash it client-side. Then they can send the hashes (hashed with a custom provided salt to the entity…
It's probably not implemented as closely as what you described but check out Europe, this small continent across the pond and the tech scene in the smaller countries. For example Estonia has had famously and online identity stuff linked via a federal ID (in europe there are more republics then federations so it's easier to manage country-wise) [0] [1] Or more familiar to me with a bigger sample is a movement in Polan…
Earlier quoted context omitted.
Sure, but if you have no evidence of it happening you have a fairly weak argument.
People do have access to privileged information and that will influence their decisions on both conscious and unconscious levels. It's not possible to detach yourself from work completely and asses your thinking whether it is influenced by something you saw or not on an objective level. It will also be difficult to prove. For example if an employee hobby is trading, how do you prove that the trades they made are base…
Earlier quoted context omitted.
Could you please tell me how did you convert it to sqlite? I've got a huge 1 GB txt file that crashes my comp every time I try to search for myself there :( Thank you!
Super hacky python script I used to turn the text files into a sqlite database: https://pastebin.com/gBWhCVGz