Hacker News Reader

Comment by fredrikaurdal | Hacker News Reader

Occasionally I go through my password manager to do a cleanup of accounts I no longer use. For the simple reason that if any one of those services get hacked, I don't want to lose credit card- or personal information, and have that end up in the hands of somebody who shouldn't have it.

In trying to delete a few accounts, some services outright refused to delete my info, without giving any reason. Therefore, I've decided in to create a naughty list of tech companies who don't respect your right to your own information.

There are already 261 sites in the list, but let me know if there are any other services you think I should add.

View on HN

I like this idea a lot. With GDPR on the horizon, this is a great resource to put together.

I’m a little confused about the implementation right now. I don’t understand Rank and Score specifically. The columns need some explanation to make it clearer if a higher number is good or bad, what the number is representing, and how it’s calculated.

Changed, clarification added.

Clean this up a bit and you can br troyhunt for gdpr and command corresponding consulting fees.

Clean this up in what way?

The navigation is a bit confusing. I didn't know the landing page was the "Naughty List". And I was expecting each "category" to filter the existing list, not show a new list of websites/companies.

Also, the ranking list isn't that helpful when 20-some companies are tied for 3rd.

Do you work with any UX designers? Get some feedback from them. It's not about making it pretty as much as it's about presenting the content in a clear way.

It's not perfect, but what I could build in a short amount of time. I'm working on creating a much better and more intuitive system.

Great! Apologies if my older post was a bit curt. I'm glad you're building this.

btw, have you seen the 2FA List? https://twofactorauth.org/

Why is Mastodon listed as "does not delete account"? Look under Security -> Delete account

Updated to Yes - Partially, because don't guarantee deletion of all data.

I don't know what you mean. Mastodon deletes all the data from the server, and sends out delete payloads to other servers that may have stored copies. If you refer to the fact that some of those copies may remain, then you need to mark all services as not allowing account deletion because Google may have caches of indexed profile and post pages.

Changed, replied to another message.

Very true, most other services don't even try to delete all data like messages received by others. Changed.

It would help to explain your scores a bit (is +10 worse than -10?)

Thanks! I changed the scoring system slightly, and added an explanation.

It looks like the major password managers are on the list.

Upstart.

Reply on news.ycombinator.com