Live data from Hacker News

Maigret: Collect a dossier on a person by username from thousands of sites

github.com

191–200 of 203 posts

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#191

Earlier quoted context omitted.

You always need to balance Precision and Recall. For something like this, you want to be exhaustive. I've worked on search engines, and depending on who is using them, that balance gets struck differently on the ROC curve. For legal matters, for example, they want every record that might match. For ad-hoc (google style) queries, nobody reads the second page so you care more about Precision @ 20 (or really, at 3)

Somewhat offtopic, I'm curious about this "nobody reads the 2nd page" meme... I find myself reading pages 2-5 quite often, because page 1 just didn't give enough results, and I doubt I'm that much in a minority ? (I'm talking about actual generalist searches, not people that use a global search engine as a replacement to bookmarks or directly searching, for instance, Wikipedia.)

There are types of queries that people discount. Navigational queries for instance, that essentially use Google as a spellcheck + DNS.

And many queries that are solved with 0 visits, thanks to the information being pulled out from the wiki, or giving up and rephrasing the query.

After those, then yes, most queries will be answered by the first page. It's what retrieval is optimized for.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#192
post #188
post #187

Earlier quoted context omitted.

The actual fix is to not reuse usernames. Does distributing password stuffing tools increase the ease of password stuffing? Yes. Is that the problem? No - people reusing passwords is the problem.

It doesn’t work retrospectively. You either start a new web life or live under a risk of accidentally exposing or linking to one of your already vulnerable accounts. Also, if we don’t raise issues like this, the next actual fix will be “don’t reuse writing styles and vocabularies on different sites”.

I believe both are inevitable if you want to maintain an unlinked identity.

Realistically, there is nothing you can do to avoid that future. The best thing you can do is choose to accept the risk or act to prevent the issue.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#193
post #173

Earlier quoted context omitted.

Actually, there is a recent ~"law"? (discussed on HN) that essentially forbids publishing research that may be misinterpreted by the pronoun people (i.e., any research can be banned).

Do you have a link / source for this?

https://news.ycombinator.com/item?id=32595767

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#194

Seems incredibly prone to false positives. For example, I can guarantee that I'm not the AdmiralAsshat on Reddit, Gmail, or Twitter, because that username was already taken by the time I tried to sign up for them.

An interesting extension to this tool would be to let you specify the interests and the site you want to sign up to, and it would generate a username that fits that profile and is available on the specific site.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#195
post #192
post #188

Earlier quoted context omitted.

It doesn’t work retrospectively. You either start a new web life or live under a risk of accidentally exposing or linking to one of your already vulnerable accounts. Also, if we don’t raise issues like this, the next actual fix will be “don’t reuse writing styles and vocabularies on different sites”.

I believe both are inevitable if you want to maintain an unlinked identity. Realistically, there is nothing you can do to avoid that future. The best thing you can do is choose to accept the risk or act to prevent the issue.

This line of thinking reminds me of a Roko’s basilisk situation. Embrace it and be prepared vs. don’t mind this nonsense and just actively stop creating/spreading it. And if it spreads enough, make it a punishable offense like hacking/piracy (e.g. via “canary” links) for it to live only in underground. I hope this project will just fly under the public radar due to non-ease of use by an average person or for a similar reason.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#196
post #189

Earlier quoted context omitted.

The people that use this tool to dig up dirt on someone will love to see a mixed bag, because it could be useful to cast shade on their actual target. This tool will be abused on purpose.

That makes no sense. They could just make stuff up, it wouldn't be any more or less believable.

Have you ever been part of a civil lawsuit? The lawyers will absolutely lie through their teeth to make their cases. They will introducw any “evidence” that they think will help them. Would you really trust a jury or a judge to understand and believe that this report is not accurate? Having been through the process, let me tell you straight up: you should not put your faith in the justice system.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#197
post #190

Earlier quoted context omitted.

Defamation is definitely one problem with this tool. Once there is “evidence”, it can be (ab)used without consequence by someone, because they can simply point at the tool output. If the output is usually “good enough”, it will provide an alibi for their actions: “I didn’t make a mistake, the computer did.”

Nobody who bothers to check what the tool does will be swayed by this. If someone wants to make shit up, and their audience will not bother to spend 30 seconds looking at their "sources", they could just write a script that outputs whatever they wanted and then point at that script.

You are putting a lot of faith in people to do that diligence. Most people will take the “evidence” at face value. And yes, people do write scripts to generate material to defame or hurt others.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#198
post #119

This project is apparently a fork of another project called Sherlock [1] which is still active. Does anyone know the story behind the fork? [1]: https://github.com/sherlock-project/sherlock

I've tried out both today. As far as I can tell maigret generates nice reports whereas sherlock only gives you the urls and you have to dig yourself int those.

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#199
post #195
post #192

Earlier quoted context omitted.

I believe both are inevitable if you want to maintain an unlinked identity. Realistically, there is nothing you can do to avoid that future. The best thing you can do is choose to accept the risk or act to prevent the issue.

This line of thinking reminds me of a Roko’s basilisk situation. Embrace it and be prepared vs. don’t mind this nonsense and just actively stop creating/spreading it. And if it spreads enough, make it a punishable offense like hacking/piracy (e.g. via “canary” links) for it to live only in underground. I hope this project will just fly under the public radar due to non-ease of use by an average person or for a simila…

This project is exceptionally minor compared to all the public hacking tools that exist. Are you advocating to start censoring any tool that can be used for malicious purposes?

Re: Maigret: Collect a dossier on a person by username from thousands of sites

#200
post #190

Earlier quoted context omitted.

Nobody who bothers to check what the tool does will be swayed by this. If someone wants to make shit up, and their audience will not bother to spend 30 seconds looking at their "sources", they could just write a script that outputs whatever they wanted and then point at that script.

You are putting a lot of faith in people to do that diligence. Most people will take the “evidence” at face value. And yes, people do write scripts to generate material to defame or hurt others.

You're making my point. People take evidence at face value, so a program like Maigret makes no difference. Why bother using Maigret when you can just make stuff up?
Post reply on HN