Mistaken Identities – The Power of a First.Lastname Email Address
summary
Chronicle of name-collision failures with concrete scale and fixes: authors log 360 misdirected emails/year, identify at least 16 distinct people (10 in Brazil) whose tax IDs, bank statements and court summons arrive at the wrong inbox, and receive sensitive personal data: bank statements, medical records, tax IDs. Shows pragmatic mitigations — add unsubscribe headers, disable automatic image loading, test confirmation/opt-in flows — and a hands-on hack: stopping a recurring PayPal attempt by SMS-flooding the verification number.
AI-written summary · about
chapters (8)
- 0:00Welcome
- 2:31First.lastname email problems
- 6:46Name collision consequences
- 16:00Mistaken identity scale
- 20:54Why mistakes recur
- 25:53Solutions for identity confusion
- 28:23Missed emails risks
- 28:44Q&A
related talks
22mPersonal Information Leakage by Abusing the GDPR 'Right of Access'
22mGDPArrrrr: Using Privacy Laws to Steal Identities
01h 11mThere Was Not a Breach; There Was a Blog
15mTransforming security and experience with digital identity
42mChallenges in User Authentication: Balancing Security & User Experience
15mKilling with Keyboards — How Your Digital Footprint Can Be Weaponized
26mPrivacy Issues in Big Data Processing in light of Data Breaches
27mSurveying Identity or Surveillance...