4 ms·

I've seen a lot of people doing this. Maybe we should have a public database of what company sold emails to who that everyone who did this can contribute to, wi

I've seen a lot of people doing this. Maybe we should have a public database of what company sold emails to who that everyone who did this can contribute to, with some kind of proof required.

dreamcompiler 6y ago
Difficulty there is that many vendors are victims of data breaches, so they perhaps don't deserve to be demonized quite as much as if they'd outright sold the data. Could be difficult to prove which side of Hanlon's Razor they fall on.
- oddlama 6y ago
  If a company has a data breach, they most likely still have a security problem. While they may actually be victims if any 3d party software is exploited, it still comes down to system misconfiguration inany cases. And that would still be their fault.
- anthony_r 6y ago
  That would be fair, but frankly as a user that gets the spam - I don't care. The damage to me is pretty much the same. It would be important to stress it out on the page that it may be due to security negligence/failure rather that just data sale.
  - jbverschoor 6y ago
    As a matter of fact.. they lost or gave away your info. They should reimburse you for that. I’m working on something I call “datapoint tax” Make this hoarding of data a (tax) liability. A policy like this will solve most problems.
- yorwba 6y ago
  That should depend on whether they informed the affected customers that their data was leaked in a breach or (if they weren't yet aware of the breach) how they react to the news that they have been breached.
- nkrisc 6y ago
  I don't really care all that much if they sold it or lost it: they had it and were not good stewards of my data. That's all that I want to know.
- TeMPOraL 6y ago
  You could argue that without painful consequences for breaches, companies will not care about preventing them from happening.
dethos 6y ago
That would be nice.
anonymousiam 6y ago
That's a great idea. I do the same thing as the parent poster, and I've seen lots of email addresses compromised. If it's one that I care about, I will contact the company. (Last time it was Tektronix, before that it was Roku.) They usually deny that it could have been on their end, which is BS because nobody besides them ever had the email address (assuming I wasn't hacked locally). The most common scenario is the insider threat. Some low-paid IT person with access to their database sells the list for a few tens of dollars. Obligatory mention: https://haveibeenpwned.com https://haveibeenpwned.com
- Redstone- 6y ago
  So we need a haveibeensold.com or emailsellingsites.com (still available)

I've seen a lot of people doing this. Maybe we should have a public database of what company sold emails to who that everyone who did this can contribute to, with some kind of proof required.

dreamcompiler 6y ago

Difficulty there is that many vendors are victims of data breaches, so they perhaps don't deserve to be demonized quite as much as if they'd outright sold the data. Could be difficult to prove which side of Hanlon's Razor they fall on.

oddlama 6y ago
If a company has a data breach, they most likely still have a security problem. While they may actually be victims if any 3d party software is exploited, it still comes down to system misconfiguration inany cases. And that would still be their fault.
anthony_r 6y ago
That would be fair, but frankly as a user that gets the spam - I don't care. The damage to me is pretty much the same. It would be important to stress it out on the page that it may be due to security negligence/failure rather that just data sale.
- jbverschoor 6y ago
  As a matter of fact.. they lost or gave away your info. They should reimburse you for that. I’m working on something I call “datapoint tax” Make this hoarding of data a (tax) liability. A policy like this will solve most problems.
yorwba 6y ago
That should depend on whether they informed the affected customers that their data was leaked in a breach or (if they weren't yet aware of the breach) how they react to the news that they have been breached.
nkrisc 6y ago
I don't really care all that much if they sold it or lost it: they had it and were not good stewards of my data. That's all that I want to know.
TeMPOraL 6y ago
You could argue that without painful consequences for breaches, companies will not care about preventing them from happening.

dethos 6y ago

That would be nice.

anonymousiam 6y ago

That's a great idea. I do the same thing as the parent poster, and I've seen lots of email addresses compromised. If it's one that I care about, I will contact the company. (Last time it was Tektronix, before that it was Roku.) They usually deny that it could have been on their end, which is BS because nobody besides them ever had the email address (assuming I wasn't hacked locally). The most common scenario is the insider threat. Some low-paid IT person with access to their database sells the list for a few tens of dollars. Obligatory mention: https://haveibeenpwned.com https://haveibeenpwned.com

Redstone- 6y ago
So we need a haveibeensold.com or emailsellingsites.com (still available)