Live data from Hacker News

Maigret: Collect a dossier on a person by username from thousands of sites

github.com

11–20 of 203 posts

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#11
post #5
post #3

Earlier quoted context omitted.

But people are commonly lazy, and you'd find that most people who don't even consider resistance to deanonymization as a concern will just use the same name on many sites.

Use the battery horse staple tool to generate usernames. Or don’t, I’m not your mom.

isn’t it:

`correct horse battery staple`

just wondering how memorable that technique is.

edit: indeed

https://xkcd.com/936/

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#12
post #3

Earlier quoted context omitted.

But people are commonly lazy, and you'd find that most people who don't even consider resistance to deanonymization as a concern will just use the same name on many sites.

Speaking personally, I kind of want people to know I'm the same person in different places. I do realize this is a terrible idea from a privacy perspective, and probably a lot of other perspectives. But I think a bunch of people want to use the net this way.

It's only bad from a privacy perspective if you are sharing things you don't want linked together or are sharing things that can be unintentionally linked back to your real life. If you are the same username across multiple sites and you want those linked together then that's just branding.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#14
I used to do what this tool does but manually when networking. Find someone I wanted to network with then find all of their online accounts to try to find an "in." Definitely very creepy but I if called it networking not stalking and its okay right.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#16
post #14

I used to do what this tool does but manually when networking. Find someone I wanted to network with then find all of their online accounts to try to find an "in." Definitely very creepy but I if called it networking not stalking and its okay right.

You can make it not feel creepy by using the research as a way to seed the conversation rather than replacing it. Ask good questions because you know [part of] the answer, but let the person decide how much they want to say in the moment.

An even better trick is to invite them for a podcast recording. Then all this research is suddenly very normal and expected.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#17
post #3

Earlier quoted context omitted.

But people are commonly lazy, and you'd find that most people who don't even consider resistance to deanonymization as a concern will just use the same name on many sites.

Speaking personally, I kind of want people to know I'm the same person in different places. I do realize this is a terrible idea from a privacy perspective, and probably a lot of other perspectives. But I think a bunch of people want to use the net this way.

Count me in as one of those people.

I use the same username (which is my real name as well) pretty much everywhere.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#18

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

Yup; for common/short usernames it's all too common for other folks to register using the same identifier.

The end result seems to be that this tool decides you're interested in "dating", "porn", "stocks" and tags you with a "ru" country code - despite not owning any of the accounts that the determination has been based off of.

The README should come with a disclaimer really.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#19

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

Some annoying people seem to have used my gmail to sign up for things like Twitch. I have all the three factor authentication stuff set up, so I don't think they can get in to click the "verify" links, but I wonder if this sort of tool would be able to verified that the account was... verified. Probably not.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#20
post #9

This is technologically impressive, but I was disappointed (but not particularly surprised) to see no mention of the ethics involved in using this sort of project - in either the GitHub issues or the README/docs. This seems like a great tool for stalking people; particularly the recursive functionality (for tying identifiers together). I'm not saying the world is worse-off due to the release of software like this - i…

As a commentary on the conundrum, not so much your post.

I always think it’s strange when people make the argument that it’s good for harmful tools to be out in the open because people can/will change their behavior because of them.

99.999999% of people will never see this repo, never know things like this exist, and don’t visit sites like HN but can, and probably will be, affected by it in some way.

Post reply on HN