Personal Security After Data Breaches

Just for “fun”…
See if your address and phone number are publicly associated with your name (or co-habitants, or relatives). These are just a few sites that traffic in this stuff; you should be able to opt out on most of them directly, if your data is there:

(Remove the superfluous spaces. Probably applicable to US only, maybe also Canada.)

whitepages . com
neighbor . report
spokeo . com
thatsthem . com
freecallerlookup . com (no opt-out?)
numlookup . com
unitedstatesphonebook . com

How well are your privacy measures working?

1 Like

Or: the USPS uses electronic sorting and expediting, and having the addresses written a certain way speeds up the process and precludes unnecessary human intervention. (Although they probably do maintain a database of all valid mailing addresses, of course, as they have to deliver mail to them.)

I think it’s probable that lots of mail-box-service addresses, in general, are catalogued somewhere as “non-residential.” Those services have to interact with the USPS, after all.
[EDIT: https://postalpro.usps.com/address-quality-solutions/residential-delivery-indicator-rdi , and check out the other products listed in the margin.]

Not registering, as you point out, would probably prevent some of that, although many campaigns might just do a shotgun blast to all residential addresses in certain areas.

Another way to cut down on the junk is to vote as early as possible, or so I’ve read, as campaigns that do use voter lists can and do also get periodic updates from the Registrar(s) of Voters. I’ve thought of getting a P.O. box so I could change my voter mailing address, but I imagine campaigns would then just have two places to spam me.

P.S. I believe some U.S. states allow the general voting public to keep their residential addresses private, even if they’re not in a risk group. Time to move?

2 Likes

The political junk mail makes good kindling but it ends beginning of November. Then the open enrollment for Medicare Advantage Plans junk mail stops the first week of December. (Pardon me if you don’t have a fireplace). The Summer season of Primary political junk mail I save until it gets cold again.

And the Disabled Veterans deliver monthly a new trash can liner bag for free in the mail. You’re supposed to fill them with old clothes and leave them on your front porch, but I repurpose them for the outer kitchen can liner. For the inner trash bag I use paper grocery store bags, they fit my kitchen trash can perfectly.

1 Like

I tend to do both. Randomise first then request deletion.

If the service actually deletes then props to them but it was a small amount of my time wasted. If the service hides so that login no longer works but the data is retained “forever” by them then it’s a win for me. If the service ignores so that login continues to work “forever” then it’s a win for me.

There are gaps in my strategy.

1 Like

I’m sure that the USPS does do that but that doesn’t really, um, address the point being made, which is: you enter your address on a web form and the web form rejects the address up front because the address is not in “a database”.

Wouldn’t you put the PMB number in the name? The name is typically not considered part of the address and therefore will not be validated against the address database. The only challenge is that the web site in question would need to support two name fields viz. the delivery name field (will hold the PMB number) and the billing name field (would want to match the credit card being used to pay).

1 Like

Why not stop using online websites registration? I have a few but only to receive my electric, and waters bills on email. One thing I notice after I stopped using online websites, especially those to buy things online is that I buy much less things, only what I truly need.

2 Likes

Behavioral changes are not easy to implement for most people. Quite often, convenience is king.

2 Likes

The website could be simply enforcing the preferred format used by the USPS, but the site could be checking it against a list of known USPS addresses in real time, I suppose. That would probably require either some ad hoc link to a USPS database (possibly visible in, e.g. NoScript, so that would be one way to confirm), or the site itself maintaining its own updated national (or international?) list(s), periodically updated.

The only thing I’ve ever seen is that if I enter a street address by splitting it over 2 lines, the form then presents me with the option of consolidating it on a single line (a la the approved USPS format). It also converts my all-caps to dual case letters.

I do this, too.

2 Likes

This might work for some things, but unless one plans to withdraw from the modern world and live in a cave, one will have to complete some actions online. An alternative might be to only conduct business by telephone, with hours spent on hold, talking to bots, or uninformed customer service reps, but for me, … hell no!

I’ll just continue to protect and secure my digital interactions as usual.

1 Like

The convenience factor doesn’t affect how many purchases I make anyway. My brain is still largely wired for how things used to be. I still make more Amazon purchases from inside of various retail stores, than I do from home. So I drive to the local hardware or electronics store as a first step to making the average purchase. Upon arriving there and not finding what I came for anywhere on the store shelf, I bring up the Amazon app, as I stand in the store aisle, disappointed that I can’t make many purchases the same way I used to buy things. After I swipe the “Buy” button in the Amazon app, I leave the store, telling myself that maybe one day I’ll learn to not bother to even drive to the store when I want to buy something.

1 Like

So the former in your case.

Generally, I only use Amazon for online purchases. Even if the price for a given item is higher on Amazon, I use Amazon. Rather than risking my credit card information and having the added burden of maintaining multiple online accounts at different places. But unavoidably, that strategy is not fullproof. The water company has its own logins. The power company has its own logins. Everyone who wants you to conform to their automated electronic system, requires their own logins. Often, if you don’t go along with their requirements, you will never be able to reach a real person who will help you. But if there are two providers and one does not force me to login, I always pick the one that does business the old fashioned way.

1 Like

The worst part about junk mail isn’t about the disposing of it. If I have only five pieces of mail that I want and nothing more, I may open one immediately and save the other four for later because I already know what they are and that they are not time critical. That takes five to ten seconds to remove the mail from the mail box and then I am on my way.

When I have twenty pounds of junk mail to sort through, I am forced to sort through that twenty pounds of mail to get to just those five pieces that I want. As my eyes pass over the other pieces of mail, the advertiser wins. They get to give me a sales pitch in writing, when my intent is to pretend that they do not even exist. They waste my time and mental energy. Yes, I do have a large resistance to their crap. But they also disguise their junk in many cases, to apoear to be legitimate. Sometimes, I have to open and read something, just to be sure that I am not ignoring something from my mortgage holder or another legitimate source. This sorting process can take me twenty minutes or more. It makes me angry because my mail box belongs to me, not them. They are just vultures, people who diminish the quality of life (even if only for a few minutes) for the rest of us. In other parts of our lives, we can get court orders to stop harassment. But with respect to your mail, there is no such alternative. The US government participates in this harassment. They get paid for every piece they deliver. There is no way to opt-out. How is this fair?

If someone is sending you something unwanted that is extremely pornographic via the US postal service, you can get the post office to stop that. The law refers to that as “obscene materials”. But the government gets to decide for me what is and is not obscene. The unwanted harassing ads are not considered by the government to be “obscene” by them.

1 Like

Yes, there is, and it works pretty well: How To Stop Junk Mail | Consumer Advice

It won’t stop political campaign mail, though.

In addition, make sure you disallow marketing in all your accounts: mortgage lender, credit cards, banks, etc.

Also, review the links I posted throughout this thread.

1 Like

That is a good lead. Thanks!

It might be nice to find out who the officers and board members of the Direct Marketing Association are, along with their respective home addresses. We could all make up rubber stamps with that information. Then, everywhere you go, you use the rubber stamp to enter contests, subscribe to newsletters, and to submit product inquiries. We could do the same to the corporate mail box. Ultimately, none of those guys could get access to any of their mail without sorting through all of the crap that we generate for them. Maybe the marketing association could sell us lists that we could use to generate this junk mail for them, from. With enough people generating this crap for such a small number of people, they could get 100x the amount of junk that you or I get. Maybe they’ll understand then just how preditory their business really is.

3 Likes

Yes, and there are similar opt-out programs for Canadians too.

1 Like

We could sign up all the political campaign headquarters for lots and lots of catalogs.

2 Likes

I would rather reduce the amount of trees being cut for marketing purposes if I have the power to do so.

1 Like

It could be, and I can’t speak for what the USPS offers at all, but here I have the exact same problem, frequently, and I have observed the behaviour often enough, and even worked with the data from the underlying database … to be reasonably confident that what I am saying is happening is what is actually happening (at least here).

The basic idea here is:

  • each possible location that the postal service delivers to has a unique 8 digit identifier (8 digits wouldn’t be enough in the US, I suppose, but the concept is sound)
  • the postal service publishes a database quarterly that a) lists all the valid postal addresses, and b) gives the corresponding unique identifier (which once assigned does not change for a given address but is otherwise a completely meaningless number)
  • (for those using the database to send actual snail mail, as distinct from just using the database for validation) you can then basically forget about the postal address and encode the unique identifier in a relatively unique type of barcode that you print on the envelope, and the postal service will use the barcode to route the snail mail within the delivery system (and give you a discounted rate for making their life easy)

The database can be used either online (lookup is provided by service provider) or offline (copy of database resides within the business’s infrastructure). The periodic cost of the database for offline use is not extortionate, so that a business can reasonably incorporate it into their online web form validation - and indeed many web sites use it to provide lookup-as-you-type (so that you can type the prefix of your address and all the possible matches pop up and you can then click the correct one and then your entire valid address is populated in the web form with minimal typing).

(I have not used the database online so I don’t know what it costs but I would imagine that it would get expensive for a very busy web site that is doing zillions of lookups.)

2 Likes

I have seen more than once the domain “.one” rejected because the site thinks it is not a proper domain. Whether it is in a database or a hardcoded truth table, I can’t tell.

(No need to reply this is a side comment.)

1 Like