Remix.run Logo
ray__ 3 hours ago

I love this app, but it's also a significant doxxing risk especially for the large number of non-technical users that it has. A quick look at the map reveals the home addresses and names of many iNaturalist users in my neighborhood, lots of them older folks that probably don't realize that adding all of the neat wildlife that they see in their backyard (or uploading things they see on remote hikes without any 3G coverage once their phone connects to their home wifi network) is also putting their home address on display by adding a cluster of photos right next to their house that are all attached to their account.

kiddico an hour ago | parent | next [-]

I have my house covered in observations and it would not take a rocket scientist to figure out where I live. I'm also a big believer in accurately tagging observations with locations of things in case someone else wants to try to find it. If someone wants to come to my house and take pictures of spring tails they're welcome to lol

getpost 2 hours ago | parent | prev | next [-]

I can hide my home-based observation locations, but others usually do not. People who post observations in my front yard cause other iNat users to visit. This hasn't been a problem in that there have been only a few additional visitors, and they are friendly. Still, I don't like my yard being publicized.

People who walk by the yard might tell their friends, but ordinary word-of-mouth can't be queried online. Not yet.

EDIT: We did have what turned out to be a significant invasive species observation. It was published in my SO's account with the location obscured. I looked up the species online and realized it might be a concern, so I killed it and put it in the freezer. In the meantime, the California Agricultural Inspectors got wind of it and contacted iNat to obtain the email address associated with the account. After making contact, they sent someone to pick up my specimen, and the later, 4 inspectors (yes, really, 3 inspectors and a supervisor) were sent to look for additional specimens. None were found.

Unrelated to this incident, I posted endangered species (not on our property) in my account, and iNat automatically obscures the location. Later on, I got an ~~email~~ message via iNat from the California Department of Fish and Wildlife asking for access to the precise locations, which I gladly provided.

ray__ an hour ago | parent | next [-]

Wow, I didn’t know that iNaturalist was so proactive about that sort of thing. It also sounds like you have a really cool yard! :)

getpost 22 minutes ago | parent [-]

I didn't mean to suggest that iNat is proactive, they may well be.

IIRC, the exact chain of events was: Invasive Species Observation posted -> a curator at the LA Natural History saw the post and notified the CDFA (Agriculture Inspectors) -> CDFA contacts iNat to get email address -> CDFA contacts my SO. I don't recall whether iNat had a built-in messaging service at the time (they do now).

Regarding endangered species, the California Department of Fish and Wildlife evidently joined iNaturalist, in part to enhance their data collection. They seem to be monitoring iNaturalist and contacting users who have relevant observations. They seem very sensitive to privacy concerns, and cooperation is voluntary. I'm thrilled a state agency is engaging the public in protecting our natural resources.

These state employees have indeed been proactive.

jakeydus an hour ago | parent | prev [-]

What was the invasive species??

getpost 35 minutes ago | parent [-]

That would be doxxing, not that it matters here.

whateveracct 3 hours ago | parent | prev | next [-]

Does this matter if my account is some random username about birds?

Like all people learn is "someone does in fact live at that address and they use this app"

ray__ 3 hours ago | parent | next [-]

Maybe not, but I'd want to know beforehand either way. And looking through accounts near me suggests that a fair number of users add enough detail to make me think that they don't realize that their info is so public (selfies/profile pictures being the most problematic example imo).

jszymborski 2 hours ago | parent | prev [-]

Yah, this is what I do, however I think this is what GP is talking about when they say savvy (or maybe I'm flattering myself). Plenty of folks with their full details on their profile.

whateveracct an hour ago | parent [-]

Home ownership is in the public record tho, right?

whyenot 41 minutes ago | parent | prev | next [-]

I feel like this ship has already sailed. The home addresses of most people, especially if they have lived in the same place for awhile, is already online. In my case, even my salary info is online because I am a public employee.

lithocarpus 3 hours ago | parent | prev | next [-]

Yeah.. there should be a prompt that gauges how savvy the user is, and if the user doesn't understand the implications of this, the default should be low precision location data with a random offset per item + random offset per user.

jayknight 3 hours ago | parent [-]

It has options to hide or obscure the location, which I use whenever I'm anywhere near my house, but it should be a little better about prompting users to use that.

rwoll 2 hours ago | parent [-]

Strava (a running tracking app) provides two helpful controls you can set as your default:

1. “Hide the start and end points of activities that start at SPECIFIC addresses.” 2. “Hide start and end no matter where they happen.”

Then it can be useful to add your home/work/routine locations.

If iNaturalist doesn’t have a setting like that, it’s a nice approach — especially if it’s included as part of initial onboarding flow — so it helps people without needing to remember to make visibility choices each time.

deckar01 34 minutes ago | parent | prev | next [-]

Wait until you see what happens when you type your address into google earth.

https://youtu.be/xicsyakpIL4

RobotToaster 3 hours ago | parent | prev [-]

There's an option to obscure the exact location of plants, but it's not obvious.