LostCousins Newsletter 8 April 2013- Security

[Carla]

I know Jennie has already started a discussion with this heading but i wanted to comment on something else that was mentioned so have put it separately.

Peter wrote about how Facebook can reveal your secrets, and went on to give some examples you can try

Have you tried searching for your own name using Google? Or for your email address (put it in double quotes)? Or for your user names?You might be surprised at what you find!

Well i did this and was rather startled at what i found. Actually the word i should use is horrified!
All was fine when searching my name.....*phew*.....lots of American's with my name but not me! It was different with my email. Only two references thank goodness but very plain to see for anyone looking on Google as they showed up even if you didn't click on the link shown. Both sites were where i have given details for Family History information, and i am shocked. I have gone to one of the links and deleted my email details and my comment but it still shows up on Google!!
The other one links me simply to
Suffolk Surname List - Surnames C -- CH

The problem is when i click on that link it states it is 'unavailable or may not exist'...yet is is still on Google. How can i delete those? Help!!

 

[Tim]

Google continuously crawls the internet and indexes everything it finds. As you can appreciate, the internet is vast and indexing this vastness takes time. At some point, it will get back round to the page you have just updated and update its indexes with the new (missing) information. So basically, you now need to wait until this happens.

I have simplified this whole process purely in the interests of making it more understandable.

The 2nd link is going to be more troublesome. Instead of trying to follow the link can you remember the home page of the site, and update your records there? If the site no longer exists then maybe approach Google?

 

[Cathy]

Does it matter? If people can associate your email address with your physical address or your bank account, perhaps it does. But otherwise? If I search on the email addresses I use or have used on Rootsweb mailing lists I get heaps of hits. For other email addresses I use, including the one I have on Facebook, I get no hits.
There seems to be two major results from your email address being visible on the internet.
1) people can contact you more easily; 2) you are likely to get more spam - but you're going to get spam anyway if you have correspondence with anyone who isn't careful about keeping their computers free of malware.

 

[peter]

The danger of publishing your email address is that it identifies you very precisely. As Carla has pointed out, there are likely to be lots of people with the same name - but there will only be one with your email address.

On its own an email address doesn't do much harm, but combine it with other information and it could be fatal. For example, when I'm trying to track down a member whose email address is out of date I'll often find their postal address by searching for their email address - it might be in the minutes of a PTA, a tennis club, or a residents' committee.

If you think about it, LostCousins works the same way - there are lots of John Smiths aged 32 but there's generally only one on a given page of the census, and that's why we use the census references.

 

[Cathy]

Unless you are someone who has a particular reason for keeping your whereabouts secret, your address is in the telephone directories. Even if you have a silent phone number as I do, you can be found through electoral rolls.

Only this morning I found the village where a distant cousin lives through a simple Google search which showed her on recent electoral rolls and gave who is listed at the same address. She lives in Shropshire. I was able to do this as I could track her marriage in the GRO indexes - and found I hadn't been able to find her when I looked for her address some years ago as my aunt had given me the wrong spelling for her husband. The GRO indexes in full weren't available then. With the GRO indexes I can trace people in England down to their children born 21st century with a fair degree of certainty unless they have common names and so identify many people in Ancestry trees marked Private. You can't do that quite so easily in Australia where BDM indexes have a much longer privacy period but if the information was put in a newspaper it's increasingly easy to find.

We can worry about the information being available but that's not going to stop it being there.

 

[Carla]

Tim....when i click on that link it does give me the details of the site name and i do know it was to do with my FH research but not sure who. i think i will have to trawl through my records.....i have a couple of ancestors that may give me a clue to where i got their information. i am learning fast to write down the places i get my information from and keep it somewhere safe.

Cathy, i do understand what you are saying but personally i don't like information like that available. I am still learning with regard to the internet and my son reminds me constantly that i am far too trusting. I have always been like that. He has taught me a lot about security, but at the start of my foray into the world wide web a few years ago i was rather naive I suppose i am fortunate that i haven't had a problem so far, and i am getting better at hiding my details. Not only that but i think i also need to 'read the small print' when on web sites. Too easy to ignore, and many people get caught out that way with paper! It's exactly the same with cyber space!

 

[peter]

Unless you are someone who has a particular reason for keeping your whereabouts secret, your address is in the telephone directories. Even if you have a silent phone number as I do, you can be found through electoral rolls.

Around half of telephone numbers are unlisted, and a similar proportion of voters have chosen to be excluded from the published electoral register. I spend a lot of time trying to track down LostCousins members who have forgotten to update their email address so I see both sides of the coin - the ones who can't be found because they are careful, and the ones who can be found easily because they are less discreet.

The last electoral register that was complete was 2002. You can search this year at findmypast, but there's a significant chance that the person you're looking for has moved, died, or emigrated in the intervening decade.

It's also difficult to identify the right person in the Electoral Registers unless the name is unusual or you know the names of other people of voting age in the same household. So innocently posting the name of your spouse on a forum might be the clue that enables someone to track you down.

 

[peter]

We can worry about the information being available but that's not going to stop it being there.

The problem comes when you post information first and worry about it later - as happened to that girl in Kent:

Kent youth PCC resigns after Twitter row

 

[Tim]

Tim....when i click on that link it does give me the details of the site name and i do know it was to do with my FH research but not sure who. i think i will have to trawl through my records....

Hi Carla,

I followed the dead link. It came up with the name www.terryaspinall.net/suffolk-surname-list/suff_c_ch.html
So I put the 1st bit www.terryaspinall.net into google, just in case they've changed their file structures.
Google suggested I might mean
http://www.terryaspinall.com/ and that link seems to work.

I don't know if this is the "new" site for what you had, but if it is there is a contact available.

 

[peter]

you're going to get spam anyway if you have correspondence with anyone who isn't careful about keeping their computers free of malware.

That's not inevitable. Well over 90,000 people have registered at LostCousins over the past 9 years, yet I currently get only 10 spam emails a week (on average) if you exclude those from people whose email accounts have been hacked.

 

[Carla]

Tim - thanks for looking for me. I went and checked out the new site and had a look round. There are two surnames the same as in my ancestral tree but not the same people...or indeed area. None of it looks familiar. I think i will have to bookmark his site and check out my ancestors but to be honest i just wonder if i just emailed a query in the past and that's how my details came to be linked? Who knows? I am flummoxed (i just love that word!!) as i do not remember having any ancestor in the Suffolk area anyway. Do i contact him or not?

 

[Alexander Bisset]

The last electoral register that was complete was 2002. You can search this year at findmypast, but there's a significant chance that the person you're looking for has moved, died, or emigrated in the intervening decade.

The full electoral register is now a rolling register that is updated monthly, a decent chunk of it is now hidden from the general public but the full register is available for various purposes. eg: all political parties registered with the Electoral Commission in the UK under the Political Parties and Referendums Act 2000, are entitled to copies of the full unabridged register in electronic format. This is also available to anyone who stands for public office for the area for which they are standing and again its the full unabridged version of the current register.

 

[Cathy]

It's strange for me to be in this discussion on the "don't be so concerned" side as I'm usually advising people on computer security. I'm simply saying that people having access to your name and/or email address is not a big deal.

On the other hand I'm very careful what information I give out online. I'm a hopeless Facebook user as I rarely post yet I could tell you what some of my friends have had for breakfast and where they had it For me it is far too much information.

I only fill compulsory sections on forms and even then if I think they don't need to know I don't put a real value - especially for phone numbers.

I use strong passwords for most sites and different passwords for every site. I use a Password Manager and my Master Password is also strong. Does that mean I can't be hacked - no because all passwords can be broken with enough effort I understand - but it's far less likely.

My computer has never been infected with malware. Is it possible? of course it is. However my husband would kill me I think. He's a computer tech and makes part of his money by cleaning computers of malware - and of course if they're badly infected, this means wiping the drive and reinstalling everything.

However, there are other ways for the technically savvy to know where you are. Most of us, I suspect, don't hide our IP address for example. The internet is a communication medium. You can't communicate if people or sites can't find you.

What am I wanting to protect? My financial details and my physical safety. Are either 100% safe? Of course not. We live in the world.

 

[Siobhan]

I have checked for my email addresses via Google and Norton's search- nothing has shown up I am conscious of Peter's advice about using different names on forums - and having searched found a lot of family history research, including a link to this site and the 1000th message - so trying to think up another forum name. When I change it on here will it change the name on all the messages?

 

[Siobhan]

I have checked for my email addresses via Google and Norton's search- nothing has shown up I am conscious of Peter's advice about using different names on forums - and having searched found a lot of family history research, including a link to this site and the 1000th message - so trying to think up another forum name. When I change it on here will it change the name on all the messages?

I will try it and see

 

[Siobhan]

I will try it and see

I have looked in frequently asked questions and cannot find how to change my forum name - also looked at preferences. Does this mean the name has to be changed by an administrator as it is the name one is registered under? If so then maybe a FQA?

 

[Liberty]

I have looked in frequently asked questions and cannot find how to change my forum name - also looked at preferences. Does this mean the name has to be changed by an administrator as it is the name one is registered under? If so then maybe a FQA?

Hi "JA" - I think this may be the case. When I registered there was something that said I wouldn't be able to change my forum name. That's one of the reasons I decided to call myself Liberty (not my real name, surprise, surprise). Apart from anything else, googling 'liberty' isn't going to lead anyone to me, or reveal much about anything. Perhaps it could be flagged at registration that people might want to take a minute to decide how they are known.
[When I first googled my real name I found I shared it with a distinguished (in some circles) recording artist that I had never heard of...]

 

[Siobhan]

Hi "JA" - I think this may be the case. When I registered there was something that said I wouldn't be able to change my forum name. That's one of the reasons I decided to call myself Liberty (not my real name, surprise, surprise). Apart from anything else, googling 'liberty' isn't going to lead anyone to me, or reveal much about anything. Perhaps it could be flagged at registration that people might want to take a minute to decide how they are known.
[When I first googled my real name I found I shared it with a distinguished (in some circles) recording artist that I had never heard of...]

Thank Liberty - good idea to flag something in the registration. I have kept the same forum name across a number of forums - partly for people to link up family history and in fact it worked a number of years ago when someone with my surname spotted a post from a person in another country - linked up some names from one of my psots - remembering my forum names. As result I am now in contact with a cousin in another country who is the 2 great granddaughter of my 2 great grandfather's sister - she had been searching for family for a long time and I did not know she existed let alone that her 2 great grandmother had emigrated - we have since met

 

[peter]

Contact me directly if you want to change your name; when I change it all of your messages will be altered but if someone has quoted one of your messages it will still show your old name (perhaps the moderators can help you out by editing the quotes?).

The instructions on the registration page were changed over the weekend and now read:

The name you choose will be shown alongside your messages - once set, this cannot be changed. You are advised NOT to use your full name or a name you already use at other sites as this could be a security risk (since messages are indexed by Google), but it may help to include your first name, eg TomR, JulieK, James6

Of course, simply publishing your name on the Internet isn't risky - it's the other information you reveal that creates the risk.

 

[Siobhan]

Contact me directly if you want to change your name; when I change it all of your messages will be altered but if someone has quoted one of your messages it will still show your old name (perhaps the moderators can help you out by editing the quotes?).

The instructions on the registration page were changed over the weekend and now read:

The name you choose will be shown alongside your messages - once set, this cannot be changed. You are advised NOT to use your full name or a name you already use at other sites as this could be a security risk (since messages are indexed by Google), but it may help to include your first name, eg TomR, JulieK, James6

Of course, simply publishing your name on the Internet isn't risky - it's the other information you reveal that creates the risk.

Thank you Peter, and for offering to change my forum name. I will contact you soon. Sorry to add another task to what must be a long, long list.