Question About Privacy At R2R

[FUNGI]

You still use a smart phone?

 

[ninjamyst]

Yes, the seller told me today that they use something called Opensend installed on their website. When I "won" my gift card, I went to their website to see if they had anything I was interested in. Apparently, by staying on their website for more than 20 seconds, Opensend collects my information, and signs me up for their email service. That's exactly what the seller told me, their full reply is quoted in this thread above.

But where did they get your email from? Someone provided them your email. Just because you were on their site on 20s, they still have to get your email from someone. The browser will provide your IP address, geolocation, browser info, but the browser doesn't have your email unless you are logged into the browser.

 

[Linlox]

You still use a smart phone?

assume that was pointed at me? You don't want to know what I have done to it though, its not very smart anymore nor does it use the play store. Aurora Store and F-droid...

 

[FUNGI]

assume that was pointed at me? You don't want to know what I have done to it though, its not very smart anymore nor does it use the play store. Aurora Store and F-droid...

It was...sorry.....
you didn't do VPN on it?

 

[smitten with ocean life]

this is creeping me out. like when i buy something at a store and when i get home i have a receipt for the item in my inbox! i know for a fact i never gave the store my email address nor have i ever gone on their website!

 

[Linlox]

It was...sorry.....
you didn't do VPN on it?

I only run a VPN on my phone when not on my local network, but then I am running my own Wiregaurd VPN server and connecting back to that from my phone through an encrypted tunnel. Why trust a VPN server if you dont trust your ISP?

 

[Fish Fan]

But where did they get your email from? Someone provided them your email. Just because you were on their site on 20s, they still have to get your email from someone. The browser will provide your IP address, geolocation, browser info, but the browser doesn't have your email unless you are logged into the browser.

I don't know, in fact, the seller claims they don't know how Opensend does it, but somehow they got my email address, and all I did was look quickly at their website one time.

 

[RoanokeReef]

this is creeping me out. like when i buy something at a store and when i get home i have a receipt for the item in my inbox! i know for a fact i never gave the store my email address nor have i ever gone on their website!

Most of the time this is due to whatever merchant account they use may be shared across another venders site you did sign in or up for. Square and Shop are prime examples of this. :)

 

[Opus]

this is creeping me out. like when i buy something at a store and when i get home i have a receipt for the item in my inbox! i know for a fact i never gave the store my email address nor have i ever gone on their website!

I believe that is a feature offered by the credit card processor. They have your email tied to your credit card and when you say you want your receipt by email then the processor gets it from the credit card and emails the receipt. The don't believe the retailer ever gets that info.

 

[FUNGI]

You really want to creep out.....
goto Javits Center in NY, there is a store inside.
Scan your CC, pick-up whatever you want (wherever in the store) and exit.
CC is charged, receipt is sent to your email.....Thank You...Come Again!

 

[Opus]

But where did they get your email from? Someone provided them your email. Just because you were on their site on 20s, they still have to get your email from someone. The browser will provide your IP address, geolocation, browser info, but the browser doesn't have your email unless you are logged into the browser.

They piece it together. Just like the big data breach at National Public Data earlier this year. They pull your information from all kinds of lists that they buy. They even were able to pull SS#'s and tie it to people. That is what makes their data breach so dangerous. That breach got the hackers 2.9 billion rows of data.

 

[Üter]

I Know What You Did Last Summer !

 

[Reefer Matt]

Another side note, a lot of our posts on here are indexed by bots in online searches like Google, Yahoo, and Bing, etc. But that does help others search for info on here who might not know about the forum.

 

[Linlox]

Actually surprised sbb replied to you being up front about what they are using and how it happened and that does say something about them. Most vendors are more secretive and would choose to ignore the request.

Everyones data is now assumed to be public information and its easier to just operate like thats the case. I have frozen my credit through all the major reporting agencies (transunion, equifax, experian) and just use a yubikey for all log ins that allow it.

 

[FUNGI]

Actually surprised sbb replied to you being up front about what they are using and how it happened and that does say something about them. Most vendors are more secretive and would choose to ignore the request.

Everyones data is now assumed to be public information and its easier to just operate like thats the case. I have frozen my credit through all the major reporting agencies (transunion, equifax, experian) and just use a yubikey for all log ins that allow it.

Make sure to lock your SS account also....unless you are already receiving it.....

 

[braaap]

The OpenSend thing is shady. But trust me when I say that I can get EVERYTHING I want to know about you from just your posts on here. Everything has a trail. And it all leads to your data. With about an hour of work I could obtain everything I need to open an identical identity to you.


Obviously I’m not saying I’d do that. But nothing about the internet is secure. Best things you can do is only use encrypted data, VPN, encrypted email, and encrypted browser. Even then if you don’t rotate those things to new accounts often your data is still going to get out.

But thanks for posting this. The vendor in question already looked shady. I’ll avoid them as well.

 

[Linlox]

I compiled a markdown of all the IPs in plain text that get queried by sbb's website if you want me to message it to you. You could compare all of those domains and see if you happened to ever log into one of them from your IP or browser in the past and that could be your culprit for the email share. It could be tedious.

Make sure to lock your SS account also....unless you are already receiving it.....

it is. among a number of other things I don't use or need.

 

[braaap]

Also despise the amount and type of information being collected like crazy today and do what I can to limit it.

Have bought a bit from sbb corals, and have had a very positive experience with them, however after learning this, unless they get rid of that pixel for collection I wont give them any more money either. Just found my security cameras and a smartTV grabbing other network device types and usages, then uploading it to chinese baidu servers.....

Running an AdGuard Home server on the network to stop some of the tracking and ad related DNS traffic, even though you have to block dns over https now to force them into plain dns. The IoT devices are segregated into their own vlans along with work devices. VPNs used when warranted.

Using the Proton ecosystem with the simplelogin as suggested earlier in the thread and have well over 100 aliases and their email, calendar, cloud storage, password manager, vpn have really improved over the years.

Search using duckduckgo 95% of the time, and generally just avoid the google, apple, microsoft, facebook, or other data sucking companies/ecosystems. Not entirely possible, but, you know... stupid youtube.

Running Linux Mint on my laptops and gaming PCs. Linux has come leaps and bounds the last few years and I play my steam games, discord, well everything on it now, bye windows 11, and your insane amounts of telemetry you are uploading. Might not ever need to use the console in linux like the old days with these newer OSes.

None of this is very convenient or free, but if we want that, then you have to pay the price with your privacy, security, or anonymity.

I do almost the same thing for my sensitive info. But even then most of my info is out in the public domain.

People really want to be ticked? Look up Flock Safety. They are internet connected cameras that Police departments are putting everywhere. Lowe’s, Target, Home Depot etc have them watching every entrance to their properties. They scan your license plate against a police database. Granted that happened before it’s now being put virtually everywhere.

 

[FUNGI]

This is a rabbit hole I will not go down.....so, hope OP sorts this out lol....

 

[Linlox]

I do almost the same thing for my sensitive info. But even then most of my info is out in the public domain.

People really want to be ticked? Look up Flock Safety. They are internet connected cameras that Police departments are putting everywhere. Lowe’s, Target, Home Depot etc have them watching every entrance to their properties. They scan your license plate against a police database. Granted that happened before it’s now being put virtually everywhere.

Learned this year that every road that crosses my county line has a hidden camera that tracks the license plates and occupants of everything that crosses that line in and out, similar to the toll roads camera systems. This information goes directly to the county sherriff.