4 ms·
If someone took a leaked dataset, like for example the Dixons Carphone leak with 1.2 million records with personal info, then generated 1.2 million letters usin
by Guzba 7y ago
If someone took a leaked dataset, like for example the Dixons Carphone leak with 1.2 million records with personal info, then generated 1.2 million letters using the template from this repo, that would make for an interesting DoS attack.
With that in mind, a big blast is also easy to filter out.
Perhaps, instead of sending them all at once, you sent a random number from 1 to 100 per day, every day, indefinitely. No way to filter out the bogus requests, forced work for the company, and unknown consequences of having these people emailed about their private information usage. Chaotic good or chaotic evil? I have my opinion.
- deleted 7y ago[deleted]
- icebraining 7y agoCompanies not only can, but are actually required, to verify your identity before giving out data. They can just send a template email with the necessary steps to verify it, and only do the work when that is done.
- Guzba 7y agoPeople getting letters / emails about verifying their identity with a company would be a perfect outcome depending on your goal.
- icebraining 7y agoWhat would that gain, compared to e.g. using the "reset password" form that most sites have now?
- emiliobumachar 7y agoBeware, impersonating people is more of a crime than alternative means of giving a company hell. IANAL.