Slashdot Mirror


Data Firm Leaks 48 Million User Profiles it Scraped From Facebook, LinkedIn, Others (zdnet.com)

Zack Whittaker, reporting for ZDNet: A little-known data firm was able to build 48 million personal profiles, combining data from sites and social networks like Facebook, LinkedIn, Twitter, and Zillow, among others -- without the users' knowledge or consent. Localblox, a Bellevue, Wash.-based firm, says it "automatically crawls, discovers, extracts, indexes, maps and augments data in a variety of formats from the web and from exchange networks." Since its founding in 2010, the company has focused its collection on publicly accessible data sources, like social networks Facebook, Twitter, and LinkedIn, and real estate site Zillow to name a few, to produce profiles.

But earlier this year, the company left a massive store of profile data on a public but unlisted Amazon S3 storage bucket without a password, allowing anyone to download its contents. The bucket, labeled "lbdumps," contained a file that unpacked to a single file over 1.2 terabytes in size. The file listed 48 million individual records, scraped from public profiles, consolidated, then stitched together.

4 of 56 comments (clear)

  1. 4 scumbags and a data scientist. by CaptnCrud · · Score: 4, Informative

    Here is their publicly available personal info.

    http://www.localblox.com/

    George Fink - CEO/Marketer/Scumbag: https://www.linkedin.com/in/ge...
    Sabira Arefin - Founder/Entrepreneur(lol)/Scumbag: https://www.linkedin.com/in/sa...
    Colby Atwood - President/Marketer/Scumbag: https://www.linkedin.com/in/co...
    Ashfaq Rahman - Chief Data Scientist/Scumbag: https://www.linkedin.com/in/as...

  2. Counter argument by Comboman · · Score: 3, Interesting
    I'm gonna say no, based on the Supreme court case Feist v Rural Telephone Service.

    The court found that information alone without a minimum of original creativity cannot be protected by copyright. In the case appealed, Feist had copied information from Rural's telephone listings to include in its own, after Rural had refused to license the information. Rural sued for copyright infringement. The Court ruled that information contained in Rural's phone directory was not copyrightable and that therefore no infringement existed.

    --
    Support Right To Repair Legislation.
  3. What a world by jenningsthecat · · Score: 5, Insightful

    A Canadian kid gets charged with "exploiting a vulnerability", (i.e. incrementing a number in a URL), and faces ten years in prison for archiving the FOI data he collected as a result. He had no idea he was doing anything wrong. (FOI? Hello!). These assclowns scraped data, and created 48 million personal profiles without consent. They knew full well what they were doing. Then they effectively published the data. Careless, much? Arguably they were criminally careless. They probably won't face any penalties at all. Go figure.

    --
    'The Economy' is a giant Ponzi scheme whose most pitiable suckers are the youngest among us and the yet-unborn.
  4. Re:"Leaked" public data by Nidi62 · · Score: 3, Insightful

    I'm not sure that word means what you think it means.

    the company left a massive store of profile data on a public but unlisted Amazon S3 storage bucket

    Cue the Congressional hearing with the 80 year old Congressman asking why Amazon even allows companies to store anything in these buckets if they have holes, and why they can't just stop the leaks with duct tape.

    --
    The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil