4 ms·

Gravatar allows mass collection of user info

• xiekomb 5y ago
  The json endpoint is patched but it must have been scrapped by many people since this has been published.
• brokenmachine 5y ago
  Hmm, I got an email from haveibeenpwned today titled, "You're one of 113,990,759 people pwned in the Gravatar data breach", and then this shows up on hn from October 2020. Odd. I don't even know why I would have a Gravatar account.
  • Dma54rhs 5y ago
    Possibly by creating a WordPress account, at least there was a time it tried to create you a Gravatar profile at the same time.
    • brokenmachine 5y ago
      Never had a WordPress account. I remember there was something with a stackoverflow comments account, I have a hazy memory that it had custom avatars that were unique somehow, like a hash of the name or something. Could it be that?