Hacker News new | ask | show | jobs
by Liquix 1027 days ago
"Just fill out this form with the very information you're trying to take down and submit it to our servers! It's not like we run a quasi-legal service based around monetizing this exact type of data!"

What reason is there to trust that the more shady brokers aren't just updating your record with IP address + 'sent an opt-out request' flag, making the data even more valuable?

5 comments

I remember Twitter asking me to send them my photo ID to remove a tweet with my personal details (someone doxxed me). It's not like it wasn't obviously doxxing.

I won't miss Twitter one bit.

This! Plus some forms require an ID and I'm not trusting those people with that kind of documents
Which is extra annoying, because they shouldn't, but it's somewhat vague.

CCPA says: "Businesses also should not require you to verify your identity, though they can ask you basic questions to identify which personal information is associated with you."[0]

The worst is that some of the bigger services (intelius, who provides data for many of these sites) have begun to require opt-outs come from an email address that they already have on file for you. Really need to legislate these companies out of existence.

0: https://www.oag.ca.gov/privacy/ccpa#sectionb

Seriously! Anyone figured out how to remove the records for cases like this? Specifically Intelius
For those I usually just upload a picture generated by thispersondoesntexist, they don't actually check them. It's just friction to discourage users from completing the flow.
What reason is there to trust any provider when you don't have direct read access to their servers?
A lot of them let you look up the info they already have on you.

I don't see the harm in pasting in the info I can see they already have, in a request to remove it.

one could change small things and tie the name to the service. It doesn't help much if you aren't a researcher.