Stalking a person with only their email & IP address

Check out this gem:

"I use spammers and pedophiles as test subjects when I’m working on something. This is mostly because it’s unlikely that they would go to the authorities and point the finger at me, knowing that I could easily turn around and say something to the effect of, “Well, yes I did pwn his box.. but you should have seen all the child porn I found on it.” owned x 2."

Well, owned x 3 because the first thing that this would do is backfire, after all if you admitted to hacking someone's box they could make a fair claim to you having put that data there.

The last thing you do when you go after a pedophile is to hack their computer, any evidence found there is tainted, and you are now a suspect with a confession on record.

There are several other laws this guy broke in his vigilante action against this spammer, he's set himself up quite nicely for a lawsuit, after all he's handed the prosecution all the documentation they could possibly wish for.

Also, consider what you’re sending in this email. What if this guy had sent me an email trying to extort me, threaten me, whatever? I could turn this over to the authorities and they’d have their work cut out for them.

Just put the IP address in the box and hit “search”. Here’s what we find.

    Region: Washington
    City: Spokane
    Postal code: 99205 

Erm, no you don't know that he lives there, it just means that the IP address he happens to hit the internet with belongs at that address. If I geoIP myself it comes up about 300+ miles from where i live , I geoIPd some of the public wifi connections I used and it's not even the same country that I am in.

I blame google analytics for this, I often hear people say stuff like "hmm , all our visitors seem to come from London, let's optimise our site for people in London".

Whether this was the case, in this instance, is insignificant, it's just one of those things that the author didn't think of, it shows the author did not think very deeply about the situation, and simply wanted to flex his technical jock.

The only thing the internet really changes is using a browser vs. going down to the courthouse.

Finding a name, address and phone number are not really a big deal. Life is far better knowing lots of people than it is knowing a few people. My time is worth far more than anything I could hope to gain from tracking down someone who sends me email I don't want. I'd much rather just click the Spam button and get on interacting with the wonderful people in my life.

"OMG, someone on the internet found my name, address, and phone number. I don't know how I could go on living my life dealing with phone calls and mail, my life has been completely destroyed!"

If this person could put my name, phone number and address infront of every person on the planet I'd gladly pay for that service, it would be extremely valuable having 7 billion people know how to reach me.

Separately, this is also incorrect:

"and it’s the administrative contact, which means he owns the domain"

The "registrant" actually owns the domain. Not the admin contact. Of course the admin contact can own the domain. And all the info can be false anyway as mentioned.

For example in the case of the domain "ycombinator.com" the admin contact is "Kirsty Nathoo" who, according to linkedin, is the "VP Finance and Operations at Y Combinator". The registrant is Ycombinator LLC and of course that makes sense that they are the owner.

Geo locating ip addresses also produces far from gold standard results.

The only things I'd add is that if you're a state of Washington resident, your personal details are particularly open to the Internet. They seem to have every little government database open for use. I always breathe a sigh of relief when whoever I have to track down lives or has lived in WA.

In numerous other cases, I've had to track down people merely with a street address, and getting a full dossier on those people is equally easy.

If I were to use illegal techniques, it would be orders of magnitude scarier.

I track down criminals or long lost loved ones normally, but how do you combat being found? Dis-information. I could go on about this, if people were interested.

Summary: keep your personal life off the Internet.

ring me up :)

I'm not worried about my address, phone, name or email. You can get those from the doormen, co-workers, friends, google and hundreds of documents scattered around the world (bills, contracts, registers, etc).

The best you can and should do is protect your personal life. I recently switched my FB account to "friends only" - that should be the default for everybody.

http://www.youtube.com/watch?v=fEmO7wQKCMw

Is actually pretty cool, albeit a little far fetched in parts.