Ars covered it in 2013, it's common in security (Risky Business, OSInt, Krebs) https://arstechnica.com/information-technology/2013/01/how-t...