Live data from Hacker News

Maigret: Collect a dossier on a person by username from thousands of sites

github.com

151–160 of 203 posts

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#151
post #125

Earlier quoted context omitted.

Somewhat offtopic, I'm curious about this "nobody reads the 2nd page" meme... I find myself reading pages 2-5 quite often, because page 1 just didn't give enough results, and I doubt I'm that much in a minority ? (I'm talking about actual generalist searches, not people that use a global search engine as a replacement to bookmarks or directly searching, for instance, Wikipedia.)

Source: https://www.sistrix.com/blog/why-almost-everything-you-knew-... TLDR: on the second results page, each result gets So it‘s not nobody, but statistically speaking not very many.

But how much is this affected by my caveat inside the parentheses ?

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#152
post #6

hah, I thought it sounded like sherlock[1] and lo, it's a fork! can't find a comparison of them though; any idea how they differ? 1: https://github.com/sherlock-project/sherlock

> sherlock

Comparing the options described in their readme files, maigret adds --html, --pdf, --tags beyond what sherlock supports. And, it adds documentation beyond a README file.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#153
post #18

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

Yup; for common/short usernames it's all too common for other folks to register using the same identifier. The end result seems to be that this tool decides you're interested in "dating", "porn", "stocks" and tags you with a "ru" country code - despite not owning any of the accounts that the determination has been based off of. The README should come with a disclaimer really.

Isn't it obvious just from reading one sentence about what it does? As it clearly says, it's based on username only, so multiple people's results may be mixed in the dossier if they share a username. We don't need a disclaimer for every thing that a moment's thought can reveal.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#154

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

The next step is when Google blocks your account based on the behavior of said similar alias, in other parts of the internet tubes....

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#155
post #140

Earlier quoted context omitted.

You always need to balance Precision and Recall. For something like this, you want to be exhaustive. I've worked on search engines, and depending on who is using them, that balance gets struck differently on the ROC curve. For legal matters, for example, they want every record that might match. For ad-hoc (google style) queries, nobody reads the second page so you care more about Precision @ 20 (or really, at 3)

> You always need to balance Precision and Recall. For something like this, you want to be exhaustive. Respectfully disagree. You're right in principle if you build a tool like that for yourself. But since this is Open Source, you have to take into account that people who don't understand that will use the tool as well and then use that as "evidence" in whatever arguments they're having with someone.

Hopefully they read one sentence about what the tool does before using it. If they don't, their arguments will be weak due to their own sloppiness in research, which doesn't seem like a new problem.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#156

Earlier quoted context omitted.

Maier is only #34 in Germany, Meyer is #6, and mine, Wagner, is at #7 ;) https://en.wikipedia.org/wiki/List_of_the_most_common_surnam...

Here in the United States we choose “John Smith” as the most generic and common name for a man. What name would a German pick? Curiously, for a supposedly common name I have never once met a John Smith.

I thought it was John/Jane Doe but I now realize that those are only for unidentified people (in police/judiciary contexts).

In Italy - for the record - it would probably be Mario Rossi (as an example on a mockup form), but conversionally it would be Pinco Pallino.

There are a few dedicated English wikipedia pages:

https://en.wikipedia.org/wiki/Placeholder_name

https://en.wikipedia.org/wiki/List_of_terms_referring_to_an_...

https://en.wikipedia.org/wiki/List_of_placeholder_names_by_l...

it is interesting to see the slighty different use in the various languages.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#157
post #141

This is why I use many different usernames, I must have used maybe three dozen different ones by now. The only time I use the same username is for games because I want people to know what other games I play. My opsec is pretty awful but I at least try to not be "simply type in the username I always use into google or some tool on GitHub" bad. I at least want somebody to have to use a few hours or pay a data broker to…

Thai won’t be helpful going forward. The next gen of tools will analyze your writing style and make the connection through that.

I would be willing to bet that, around the same time those tools become widely distributed (kind of like what stable diffusion did for AI artwork), adversarial tools that emulate or obfuscate writing styles will exist as well.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#158

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

Sometimes I used other people's usernames too for this reason.

Please don't steal. You may be making it difficult for the people you steal from.

I often use the same username(s) on multiple forums where people discuss similar topics because I want other people who visit the same forums to recognise me as being the same guy.

I've found this username taken a few times, and it has bugged me every time. While it is from Tolkien's Elvish, it is obscure and then misspelled (actually a portmanteau). I've had to add a prefix, such as "TheReal" to it.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#159
post #155
post #140

Earlier quoted context omitted.

> You always need to balance Precision and Recall. For something like this, you want to be exhaustive. Respectfully disagree. You're right in principle if you build a tool like that for yourself. But since this is Open Source, you have to take into account that people who don't understand that will use the tool as well and then use that as "evidence" in whatever arguments they're having with someone.

Hopefully they read one sentence about what the tool does before using it. If they don't, their arguments will be weak due to their own sloppiness in research, which doesn't seem like a new problem.

the thing is, people who want to use this for defamation don't have an incentive to sanitize the data - the message might stick around regardless of whether it has any merit (we've seen this happening even at the most publicly scrutinized national level, imagine how much fewer defenses smaller players have)

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#160

Earlier quoted context omitted.

Even if you used the same username on different accounts, you should have different passwords anyway.

Really, why is that?

because if you get your account compromised on one site/forum because of lax security on their end, you don't want all your accounts compromised.
Post reply on HN