News for hackers. Stuff that matters.
Re:Maigret: Collect a dossier on a person by username from t... by rtev on Monday October 03, 2022 @03:22PM (#33072357)
The actual fix is to not reuse usernames. Does distributing password stuffing tools increase the ease of password stuffing? Yes. Is that the problem? No - people reusing passwords is the problem.
Re:Maigret: Collect a dossier on a person by username from t... by wruza on Monday October 03, 2022 @08:48PM (#33075516)
It doesn’t work retrospectively. You either start a new web life or live under a risk of accidentally exposing or linking to one of your already vulnerable accounts.

Also, if we don’t raise issues like this, the next actual fix will be “don’t reuse writing styles and vocabularies on different sites”.

Re:Maigret: Collect a dossier on a person by username from t... by rtev on Monday October 03, 2022 @11:59PM (#33076590)
I believe both are inevitable if you want to maintain an unlinked identity.

Realistically, there is nothing you can do to avoid that future. The best thing you can do is choose to accept the risk or act to prevent the issue.

Re:Maigret: Collect a dossier on a person by username from t... by wruza on Tuesday October 04, 2022 @07:52AM (#33079086)
This line of thinking reminds me of a Roko’s basilisk situation. Embrace it and be prepared vs. don’t mind this nonsense and just actively stop creating/spreading it. And if it spreads enough, make it a punishable offense like hacking/piracy (e.g. via “canary” links) for it to live only in underground. I hope this project will just fly under the public radar due to non-ease of use by an average person or for a similar reason.
Re:Maigret: Collect a dossier on a person by username from t... by rtev on Tuesday October 04, 2022 @05:10PM (#33086958)
This project is exceptionally minor compared to all the public hacking tools that exist. Are you advocating to start censoring any tool that can be used for malicious purposes?