4 ms·
How does one know a site like this is not just an other data harvesting site?
by szundi 6y ago
How does one know a site like this is not just an other data harvesting site?
- atoav 6y agoThere is sourcecode for both front and backend and the creators linked their names. So check the sourcecode and decide whether you trust the people involved that this is actually the code that is running the site
- volta83 6y agoHow do you know that the source code they published is the same code that the site uses?
- bidirectional 6y agoYou don't. Their comment literally says that. You can choose whether or not you trust the authors.
- Arainach 6y agoWhen they identified that my data was part of the link, they included an obfuscated first and last name - first letter plus length of each. If they were harvesting data, they certainly appear to already possess it.
- runeks 6y agoI put up another site for that: https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com Just enter your email and the site will tell you whether your email has been harvested by https://haveibeenfacebooked.com/ https://haveibeenfacebooked.com/
- emayljames 6y agoTry my site, that checks this guys: https://haveibeenpwnedbyhaveibeenpwnedbyhaveibeenfacebookeddotcom.com/ https://haveibeenpwnedbyhaveibeenpwnedbyhaveibeenfacebookedd...
- jmchuster 6y agohttp://ismycreditcardstolen.com/ http://ismycreditcardstolen.com/
- ddalex 6y agoThat's an easy one: yes :)
- simonke 6y agoThey are in the EU, which means that you are protected by the GDPR. And the websites clearly states that no data is being harvested. I believe that two italian teenagers would not want to get sued to bankruptcy :)
- Mordisquitos 6y agoEven if they were running it with nefarious purposes, it's barely even data. All they could realistically "harvest" would be knowing that the user behind a certain IP address was curious as to whether this or that number was a telephone number in the leak, and there's nothing to guarantee that the number belongs or ever belonged to the person looking it up, or even whether it is an actual telephone number or not. I could see the "big-data" value of that information if they managed to get a significant proportion of the population to check this website, but even that would be barely worth the effort.
- wodenokoto 6y agoI feel like I was doing the same mental gymnastics when I gave fb my phone number in order to log into messenger on my phone, and look where it got us.
- a10c 6y agowhat mental gymnastics? Giving your phone number to facebook associates it with your account, who you know, your browsing habits etc. This does nothing of the sort.
- Mordisquitos 6y agoHow did Facebook know that it was a valid phone number, how did they associate it with your identity, and how did they know that number was really yours?
- wodenokoto 6y agoIt’s probably been a decade since I gave them my phone number, so I don’t remember the details. I believe they required it for the messenger app and did a 1 time SMS code for first time log in to messenger.
- s_dev 6y agohttps://www.troyhunt.com/the-ethics-of-running-a-data-breach-search-service/ https://www.troyhunt.com/the-ethics-of-running-a-data-breach... Other than Troy Hunt being well known and building a reputation on being a white hat security guy. In the world of data the only thing you can trust in absolute terms is encryption. Anything else involving people involves shades of grey.