[marethyu]

> To identify this person, the cops contacted Kik, but their subpoena accidentally requested information about the Kik user “fus_ro_dah” (one underscore after “fus”). Kik provided Klayme’s email address in response.

> Google records showed that this email address was used to access Google services from an IP address in Canada, so the Dane County investigators turned the case over to Halifax Regional Police. Halifax police took the IP address they had been given to local Internet provider Bell Aliant. Bell connected the IP address to the physical address of their subscriber, Brandon Klayme.

This is startling to me as it shows how easy to pinpoint exact location based on email alone.

[esafak]

Is it surprising? Every time you log in your IP is recorded, and the ISP can handle the rest.

[kalleboo]

And this is why IP addresses are often considered personally identifiable information under the GDPR, as impractical as that makes things like anti-spam/anti-bot.

[account42]

GDPR requires a lawful basis for collecting and processing PII and one of possible lawful interest is "legitimate interests" that reasonable anti-spam/bot systems would fall under, i.e. ones that don't needlessly store the IP forever and don't use it for other purposes than security.

[stkdump]

One of the rare cases where a vpn actually does help. Though of course only if they don't also turn over records.

[inigyou]

I thought everyone knew that hiding your IP address from the government was a big reason to use trustworthy VPNs.