2. What do I hope to achieve by using you as an example for other people (since you were so forthcoming)?
I'd like to emphasize that disparate internet identities can be easily linked to more personal information through simple Google searches.
This happens when you inadvertently link disparate identities using screen names, real names, e-mail addresses, residential addresses, phone numbers etc. All it really takes is one or two slip ups and it's all been disclosed and linked - and it's all public.
Furthermore, people may not remember what they did yesterday, but the internet does. There is a permanence in the current embodiment of the internet. This means that you could have slipped up once yesterday... or it could have been ten years ago when you were younger and not quite as wise.
Finally, all of the methods that I've used have been strictly legal i.e. accessing information in the public domain. If I were bent on some other purpose, I might resort to other means that could give me access to even more of your personal information.
3. What would I like to achieve by sharing my own personal experience?
I happen to be friends with two girls who have been stalked (restraining orders, etc.).
Their only real means of protecting themselves online is being vigilant about what they post and how they conceal their identities. (There may be other methods that I'm completely unaware of that they haven't disclosed.)
An insecure system (i.e. not even
https://) that not only dictates to them but forces them to reveal their identities is a breach of their privacy. Obviously, their only option, in this instance, is to abstain completely from using that system.
However, if this becomes the gold standard for online interactions, then they are being discriminated against. This is a violation of social equity, and it is a breach of their privacy.
The educational system, for example, just doesn't post any child's photo, name, or artwork. The educational system requires the consent of child's parent or guardian. Some people have reason to seek privacy and protect their identities. Who the hell are you (i.e. a third-party corporation that doesn't share their interests) to impose a one-size-fits-all full disclosure system upon them?
I can foresee class action lawsuits if this gets carried forward.
----------
PS. - If I really wanted to track you down, Ken, I wouldn't stop with your Facebook profile... chances are that I'd search for information on all of your family members to narrow my search... If I felt I had enough information about you, I might try to "phish" one or your login pages or e-mail accounts... or maybe resort to a "brute force" password hack on an insignificant, unsecured profile of yours, to crack your password (under the assumption that you're using 3 different passwords, MAX). After I'd obtained your password(s), I'd hack your e-mail and look for more personal information... maybe I'd find your address or invoices from your phone company or credit card statements. I'd start assembling the components of your identity, then I'd be ready to make my play. What I do next really depends on what my motives are... Maybe I'll just settle for selling your information to a third party... but maybe my intentions are more malicious and I want to arrange an unannounced meeting. You see where this is going don't you? But you don't care, right? You haven't suffered identity theft and can't foresee it's consequences. Moreover, you're a young male. You are in a demographic that isn't an explicitly vulnerable part of society. Furthermore, you've demonstrated an inability to empathize with anyone other than yourself.