Privacy should always be the number one concern with apps and websites. This is simply just sloppy.
Not when everything you put in is Public.
Download Public User Data with Oink's Export Tool
11–20 of 55 posts
Re: Download Public User Data with Oink's Export Tool
#12Site seems to be down. Google cache http://webcache.googleusercontent.com/search?sourceid=chrome...
sorry, trying to get it back up.
Re: Download Public User Data with Oink's Export Tool
#13Re: Download Public User Data with Oink's Export Tool
#14Ha. I thought the download service was pretty clever and well put together, but didn't notice that the link they gave you wasn't anonymized.
Re: Download Public User Data with Oink's Export Tool
#15I noticed this when I did my export as well, but when I saw the data, it was only public information. But makes for a good headline for this blogger it seems.
Re: Download Public User Data with Oink's Export Tool
#16Twitter's privacy breach: read the timeline of any (non-Protected) user by navigating to http://www.twitter.com/{username}
Re: Download Public User Data with Oink's Export Tool
#17update2 - Apparently some usernames work and others don't
I believe his account is the only one that is made public. Obtaining a list of usernames is as easy as a 'site:oink.com' search in google.
curl -I http://oink-prod.s3.amazonaws.com/kevinrose-export.zip
HTTP/1.1 200 OK
x-amz-id-2: 9lLlixkcIypVbEIPzp7lmAT3gqwxFS3h99pdgnipW5aZVmhy422YA06OaMT7KOXd
x-amz-request-id: E6D61A351A455807
Date: Fri, 16 Mar 2012 17:23:28 GMT
Last-Modified: Fri, 16 Mar 2012 17:22:17 GMT
ETag: "799ee5f116bed2fac2893dda920a987a"
Accept-Ranges: bytes
Content-Type: application/zip
Content-Length: 65492507
Server: AmazonS3
HTTP/1.1 403 Forbidden
x-amz-request-id: D3BF734D33B46816
x-amz-id-2: exsDFYH6AcczbNuZWnlFW86EO9SP8EpwMDSwx9dGjSl9A24f3jXBobTRgOw+XNrC
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Fri, 16 Mar 2012 17:23:37 GMT
Server: AmazonS3
https://twitter.com/#!/cristinacordova/statuses/180708226696...
Re: Download Public User Data with Oink's Export Tool
#18update2 - Apparently some usernames work and others don't I believe his account is the only one that is made public. Obtaining a list of usernames is as easy as a 'site:oink.com' search in google. curl -I http://oink-prod.s3.amazonaws.com/kevinrose-export.zip HTTP/1.1 200 OK x-amz-id-2: 9lLlixkcIypVbEIPzp7lmAT3gqwxFS3h99pdgnipW5aZVmhy422YA06OaMT7KOXd x-amz-request-id: E6D61A351A455807 Date: Fri, 16 Mar 2012 17:23:28…
Maybe that user is not available anymore or something else because if you try to download cristina-export.zip it sure works.
Re: Download Public User Data with Oink's Export Tool
#19Re: Download Public User Data with Oink's Export Tool
#20Was Oink 100% public or were there private conversation/shares? If everything on Oink was public (like a public blog or Twitter before direct messages), then it doesn't seem like a big deal. It's just making it easier to snoop. Otherwise, wow.
Privacy is not about whether something is public or not. It's about being in control of your data.
This is the fundamental misunderstanding that seems to be rampant especially in countries like the US that lack basic privacy regulations.
Just because information was public, doesn't mean that using it in certain ways without the permission of the person involved is not a breach of privacy.
I seriously doubt this was a type of usages Oink users explicitly agreed to (and no, burying such provisions in the small print doesn't make it legal).