Live data from Hacker News

Maigret: Collect a dossier on a person by username from thousands of sites

github.com

131–140 of 203 posts

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#131

Earlier quoted context omitted.

I'm pretty sure they meant that using a password manager means you don't have to remember the _username_ for every site.

I've started to just generate a 10-char alphanumerical string with the password generator feature and use that as the username on new accounts, starting to update them retroactively, too (by scrapping the old account and making a new one).

Thats great, then you can use the same for your password.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#132
post #85

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

This tool finds existence of accounts by username. It does not promise that all found accounts belong to the same human.

Project description in the README:

> Maigret collect a dossier on a person by username only...

The About field:

> Collect a dossier on a person by username from thousands of sites

"on a person" seems to imply that they'd belong to someone in particular. Obviously if you have any experience of creating accounts you'd know that's unlikely to be the case, and it's not written in a promissory tone. But it does imply it.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#135

Earlier quoted context omitted.

Sure, but none of them are readily available to someone you argued with on /r/politics who has taken agin you.

So, the question is: are you more afraid of random nobodies online, or are you more afraid of already organized, already powerful people who had similar capability already?

Definitely nobodies online. I don't think anything I've ever done or will do would put me in the interest radius of big agencies, government or private (outside of perhaps advertising and a few exceptions).

I have however, encountered death threats or obsessive/hostile behavior from people online who decided they have a beef with me for one reason or another. I'm much more inclined to be wary of some unstable individual having the means to find my identity (and therefore my location)- potentially using this to act on their emotions IRL.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#136
post #125

Earlier quoted context omitted.

Somewhat offtopic, I'm curious about this "nobody reads the 2nd page" meme... I find myself reading pages 2-5 quite often, because page 1 just didn't give enough results, and I doubt I'm that much in a minority ? (I'm talking about actual generalist searches, not people that use a global search engine as a replacement to bookmarks or directly searching, for instance, Wikipedia.)

Source: https://www.sistrix.com/blog/why-almost-everything-you-knew-... TLDR: on the second results page, each result gets So it‘s not nobody, but statistically speaking not very many.

That's not how statistics work. I consider myself a frequent visitor of the second results page, but even for me the CTR of the results on the second page are The question ought to be "conditional on not finding the result on the first page, how likely is the user to go to the second page versus balk, or re-try a different query?"

I'm fairly confident that number is higher than 1 %, but I don't have the data.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#137

Earlier quoted context omitted.

Maier is only #34 in Germany, Meyer is #6, and mine, Wagner, is at #7 ;) https://en.wikipedia.org/wiki/List_of_the_most_common_surnam...

Here in the United States we choose “John Smith” as the most generic and common name for a man. What name would a German pick? Curiously, for a supposedly common name I have never once met a John Smith.

There was a John Smith who was briefly the leader of the Labour Party in the UK (he sadly died very soon after becoming leader from a heart attack), and I remember him saying that before he became well-known, when he checked into hotels with his real name the receptionist's often eyed him suspiciously, thinking it was a false name to cover up the fact he was checking in with his mistress.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#138
>The Maigret database contains not only the original websites, but also mirrors, archives, and aggregators.

Deeply unsettling. Having had my share of encounteres with people online taking personal interest in an unfriendly context, this is worrying. I don't need to run a search of my info to know to use different usernames, but an automated feature that allows just about anybody determined enough to easily find not only linked accounts but archived data. I'm glad I no longer use social media, at least infrequently and not the major ones- but the fact someone can find archived information? Time to make some adjustments.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#139

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

Some annoying people seem to have used my gmail to sign up for things like Twitch. I have all the three factor authentication stuff set up, so I don't think they can get in to click the "verify" links, but I wonder if this sort of tool would be able to verified that the account was... verified. Probably not.

Easy to solve: do a password reset on the website (in your case, twitch), take over the account, then close it.

bonus point for checking the activity to see if it looks human or if it's taken over by a bot.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#140

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

You always need to balance Precision and Recall. For something like this, you want to be exhaustive. I've worked on search engines, and depending on who is using them, that balance gets struck differently on the ROC curve. For legal matters, for example, they want every record that might match. For ad-hoc (google style) queries, nobody reads the second page so you care more about Precision @ 20 (or really, at 3)

> You always need to balance Precision and Recall. For something like this, you want to be exhaustive.

Respectfully disagree. You're right in principle if you build a tool like that for yourself. But since this is Open Source, you have to take into account that people who don't understand that will use the tool as well and then use that as "evidence" in whatever arguments they're having with someone.

Post reply on HN