Official Everybody Edits Forums

capasha

Member

Joined: 2015-02-21

Posts: 4,066

Re: Everybody Edits leak sensitive information.

By knowing which friend i have, people could search on duckduckgo.

I dislike Duckduckgo because when I was installing something some time ago, I got a Duckduckgo toolbar along with it and I couldn't get rid of it
So nowadays I compare it to Ask or MyWay

What have duckduckgo to do, with installing worthless programs that adds bloatware?
Duckduckgo and startpage is the best one for my privacy.

mrjawapa

Corn Man 🌽

From: Ohio, USA

Joined: 2015-02-15

Posts: 5,840

Website

Re: Everybody Edits leak sensitive information.

Getting peoples friends without be friend with them is now patched. Thanks to xenonetix and the team.

You saved us

---

Discord: jawp#5123

capasha

Member

Joined: 2015-02-21

Posts: 4,066

Re: Everybody Edits leak sensitive information.

Getting peoples friends without be friend with them is now patched. Thanks to xenonetix and the team.

You saved us

What is your problem? Not everyone is like you and other people in this thread. That love to spread your information to everyone.

mrjawapa

Corn Man 🌽

From: Ohio, USA

Joined: 2015-02-15

Posts: 5,840

Website

Re: Everybody Edits leak sensitive information.

Getting peoples friends without be friend with them is now patched. Thanks to xenonetix and the team.

You saved us

What is your problem? Not everyone is like you and other people in this thread. That love to spread your information to everyone.

I don't have a problem. I just don't understand why this is an issue. What does it matter?

---

Discord: jawp#5123

XxAtillaxX

Member

Joined: 2015-11-28

Posts: 4,202

Re: Everybody Edits leak sensitive information.

I don't have a problem. I just don't understand why this is an issue. What does it matter?

It's a matter of privacy and the fact that nobody was given any notice that their friends list could be accessed by anyone for any reason.

I'll give you an example of a very common attack vector for obtaining personal information.

The email addresses of the users who were leaked, many of them are paired with, for example, a Facebook account, Skype account or any service that may have their real name.

If they are friends with multiple users with the same surname, you can look through their friends on Facebook if their profile is public - most are. Alternatively, if the user you are targeting has their first name in their email or disclosed anywhere, like within the private mails which were also leaked, you can look through their friends and see if there's any matching people with their first name.

The vast majority of people have less than 80 friends, the odds of having two people with the same first name are pretty small.

I've used this technique before to find personal information on people, it's very simple and if their friends list weren't public, there'd be less of a chance that I'd be able to find out who their friends are, especially if they only use that alias for Everybody Edits.

It matters. Privacy matters. It may not matter to you, it may not affect you, but that doesn't mean it doesn't affect others. If it has the possibility of personally identifying them, directly or indirectly, they should have the option to opt out. In this instance, they could not opt out as they give no prior consent nor had any knowledge of the information within the previously private table being accessible due to them changing the table to public.

---

*u stinky*

peace

Member

From: admin land

Joined: 2015-08-10

Posts: 9,226

Re: Everybody Edits leak sensitive information.

I don't have a problem. I just don't understand why this is an issue. What does it matter?

It's a matter of privacy and the fact that nobody was given any notice that their friends list could be accessed by anyone for any reason.

I'll give you an example of a very common attack vector for obtaining personal information.

The email addresses of the users who were leaked, many of them are paired with, for example, a Facebook account, Skype account or any service that may have their real name.

If they are friends with multiple users with the same surname, you can look through their friends on Facebook if their profile is public - most are. Alternatively, if the user you are targeting has their first name in their email or disclosed anywhere, like within the private mails which were also leaked, you can look through their friends and see if there's any matching people with their first name.

The vast majority of people have less than 80 friends, the odds of having two people with the same first name are pretty small.

I've used this technique before to find personal information on people, it's very simple and if their friends list weren't public, there'd be less of a chance that I'd be able to find out who their friends are, especially if they only use that alias for Everybody Edits.

It matters. Privacy matters. It may not matter to you, it may not affect you, but that doesn't mean it doesn't affect others. If it has the possibility of personally identifying them, directly or indirectly, they should have the option to opt out. In this instance, they could not opt out as they give no prior consent nor had any knowledge of the information within the previously private table being accessible due to them changing the table to public.

how can you do such a thing form some firned on an sandbox platformer where in most cases you don tknow 99% of thes epersons in real life if no t100%

---

thanks hg for making this much better and ty for my avatar aswell