PSA: If you censor your email on Jano results, censor the unique key as well.

[MulberryTrees]

I don’t know how many times I’ve seen this already, but people will censor their e-mail on Jano test results without realizing that anyone can see it by just looking up the task number + unique key. It even says so at the bottom of the test results.

So if you’re going to use your personal e-mail to receive test results (which you shouldn’t–use a burner e-mail, and censor it anyway if you’re extra paranoid), make sure you at least block out the unique key (and/or task number).

Edit: I guess I have to make this explicit, since people keep struggling to follow the original post.

1.) People should use throwaway e-mail accounts for their Jano results.
2.) Many people fuck up step 1. They use their personal e-mails to correspond with Jano and don't realize their e-mails will be shown by default. They can only do damage control after the fact.
3.) In this case, it's more important to protect your privacy than to protect the integrity of the test results.
4.) To do this you must obscure the task number + unique key, not just the e-mail.

This post is for people who have already fucked up step 1, which is a lot of people. They try to obscure their e-mail, but don't realize they must also do step 4. I AM NOT TELLING PEOPLE THEY SHOULD OBSCURE THE VERIFICATION INFORMATION AS A GENERAL PRACTICE.

 

[system]

Your not seeing how that’s pointless? What’s the point in posting jano results when nobody but you can see if they are authentic? Anyone can photoshop jano test results and if you look on meso people still do it. That’s the whole point of jano putting the key on the testing results lol.

 

[MulberryTrees]

If you want people to be able to verify the results, you’ll need to accept they’ll see the whole report. That’s not what’s at issue–it’s that people want to obscure their e-mail, but don’t realize the task number + key allow others to see it anyway. Obviously that’s why I said you should be using a burner e-mail, or just omit using the e-mail as the default when placing an order.

All of this ignores the fact that, even without obscuring anything, this is still an incredibly trust-based system. If you’re going to suspect bad actors, people viewing reports have no idea if the product sent in is the product claimed–which is why seller results hold little traction, regardless of whether they’re verifiable through the key or not.

While it’s still better to share the key with other buyers than not, as far as I’m concerned, its only real utility is in dealing with sellers directly (they might request to verify your e-mail to reimburse testing). If it’s to prevent shilling, it’s a pathetically low barrier–sellers or shills can send in legit product and then sell bunk or underdosed gear. I’d honestly only trust testing I sent in myself, and even then it’d have to be regular testing to prevent selective scamming.

 

[system]

So you apparently didn’t use a burner email in any of your testing because you obscured the task number? As long as your not legit retarded and using your college or work gmail, Who the fuck cares if someone can see your ProtonMail address? Oh no I sure hope nobody finds out my ProtonMail email and sends me tranny porn. That would really suck. As long as you aren’t clinking random links people email you or using your work gmail account literally what can happen by someone knowing your ProtonMail email?

 

[MulberryTrees]

I did use a burner e-mail, and I didn’t obscure the task number–I obscured the e-mail itself and the unique key. It’d be pretty dumb if I obscured the task number, because the task number shows in the filenames of the uploads. I’ll chalk it up to you mistyping.

Why would I bother? Because it costs me nothing. I agree the increase in security is neglible here–it’s only to avoid a particular seller (Amino Asylum) linking my e-mail to the testing, and thus my forum profile (I only sought reimbursement from 2 of 3 sellers). Again, the benefit is negligible–they’re extremely unlikely to care, extremely unlikely to seek it out, and it’s not a big deal if they do. But why volunteer that information if I don’t have to?

Another example: I don’t trust Jano. I don’t trust sellers. I don’t trust that they don’t coordinate behind the scenes. I don’t SUSPECT this is the case–I actually think it’s probably not. But I can’t verify this, so I assume the worst and plan accordingly. So I’d never use the same e-mail to do business with both sellers and Jano, because it makes it trivial for them to coordinate (even if I think it’s unlikely). But I’d re-use the same e-mail with sellers, since a consistent delivery address makes anonymity there moot.

I might consider a new burner each time I transacted with Jano, too–otherwise, one mistake (linking my testing e-mail to my public profile to my buying e-mail) would give Jano all he needs to contact sellers about my purchases. But is it worth the effort? In this case, no–if I’m making these kinds of assumptions, I might also assume he’ll recognize the envelopes, the handrwriting, etc., and I just can’t be fucked to go anonymize all that. Blocking out my burner e-mail isn’t remotely as useful, but also isn’t nearly as much effort.

 

[bahamu7]

why don’t you start selling yourself? with that level of paranoia you won’t get caught ever lol

 

[Janoshik]

bahamu7 said:

why don’t you start selling yourself? with that level of paranoia you won’t get caught ever lol

He’s not wrong, though.

When people as paranoid as that choose to use me, it actually makes me quite happy. Hard for unnamed weirdly colored animals and their pets to dispute that kind of results for being biased, for example.

 

[lil_swole]

I don’t know how many times I’ve seen this already, but people will censor their e-mail on Jano test results without realizing that anyone can see it by just looking up the task number + unique key. It even says so at the bottom of the test results.

So if you’re going to use your personal e-mail to receive test results (which you shouldn’t–use a burner e-mail, and censor it anyway if you’re extra paranoid), make sure you at least block out the unique key (and/or task number).

But if they do that it unless to us here at sst tho my guy

 

[lil_swole]

Your not seeing how that’s pointless? What’s the point in posting jano results when nobody but you can see if they are authentic? Anyone can photoshop jano test results and if you look on meso people still do it. That’s the whole point of jano putting the key on the testing results lol.

Yap I just look up some labs on Janos sit they check out but the lab was being bashed on another site so I did what alot of people would did some research everything check out right g2g want give the lab name tho but that know who the are there at the top on here and now I see why on point

 

[MulberryTrees]

But if they do that it unless to us here at sst tho my guy

I guess I have to make this explicit, since people keep struggling to follow the original post.

1.) People should use throwaway e-mail accounts for their Jano results.
2.) Many people fuck up step 1. They use their personal e-mails to correspond with Jano and don't realize their e-mails will be shown by default. They can only do damage control after the fact.
3.) In this case, it's more important to protect your privacy than to protect the integrity of the test results.
4.) To do this you must obscure the task number + unique key, not just the e-mail.

This post is for people who have already fucked up step 1, which is a lot of people. They try to obscure their e-mail, but don't realize they must also do step 4.

 

[lil_swole]

I guess I have to make this explicit, since people keep struggling to follow the original post.

1.) People should use throwaway e-mail accounts for their Jano results.
2.) Many people fuck up step 1. They use their personal e-mails to correspond with Jano and don't realize their e-mails will be shown by default. They can only do damage control after the fact.
3.) In this case, it's more important to protect your privacy than to protect the integrity of the test results.
4.) To do this you must obscure the task number + unique key, not just the e-mail.

This post is for people who have already fucked up step 1, which is a lot of people. They try to obscure their e-mail, but don't realize they must also do step 4.

I mean if the code on jano test brother my bad I should been more clear

 

[MulberryTrees]

I mean if the code on jano test brother my bad I should been more clear

Nothing against you personally man, I just wanted to make sure people understood clearly what I was and wasn't saying.