Thread: Trade me has firearms database

And I shall

Over 500 trades and I'm deleting my profile over this

Also their greedy pricing makes it an easier call to make but yes, vote with your feet

Originally Posted by 308

And I shall

Over 500 trades and I'm deleting my profile over this

Also their greedy pricing makes it an easier call to make but yes, vote with your feet

Sometimes I like to sit on things for a week or two before I come to a judgment, and I have to agree @308 - Boycotting trade me isn't a bad idea.

Internal trade me management will soon be aware that this "registry" they have implemented will hurt their revenue on firearms trading, which by the way is absolutely massive. As mentioned before they are almost the monopoly for online firearm sales. I'm hearing of more and more pulling away from using trade me because of this, you could also include their monetary corporate greed. C-mon seriously, what sort of company charges a very expensive rate for telephone customer service!

Do you think a company that truly cared about it's customer feedback would do that?? How's that for irony.

That to me in itself shows an obscurity that a company by choice wants to keep, and in my opinion is: Unethical corporate behavior.

Beware what you ask for, prior to trade me introducing there system, there was Talk of a complete ban on , online sales. Bitching and burying our head in the sand is not going to help, at a guess I recon after the election (regardless who ever is voted in ) changes will happen.

Originally Posted by Taff

Beware what you ask for, prior to trade me introducing there system, there was Talk of a complete ban on , online sales. Bitching and burying our head in the sand is not going to help, at a guess I recon after the election (regardless who ever is voted in ) changes will happen.

Who was talking exactly?

I hit up popo about this as soon as I got the newsletter from TM announcing it:

I just got a newsletter from TradeMe informing me that there will be some kind of cross-check that TradeMe membership details match firearms licencee details in your database.

Can you make assurances that a breach of TradeMe's security could not result in hackers obtaining information as to which TradeMe accounts are verified as belonging to someone who holds a firearms licence (thus enabling targeted burglaries of the membership addresses held by TradeMe) or expose the addresses of licence-holders that are your own database?

On the face of it this measure should make it more difficult for unlicensed people to obtain a firearm on TradeMe, which is definitely a good thing, but it would be tragic if a directory for firearm addresses were to fall into the wrong hands as a result of the data sharing between Police and TradeMe.

Their reply:

Whenever someone asks a question, bids or buys a firearm on Trade Me they will need to enter their firearms licence number and the name on that licence. This new system will send a query to the Police database to check the licence is legitimate. The query sent from Trade Me will contain only the name and number of the submitted licence, and will be responded to with a simple “yes” or “no” answer from Police. If the licence has expired or the details aren’t correct, the submitter will not be able to go further.

You can be assured that suitable industry standard IT safety systems have been put in place to reduce the likelihood of any system breaches.

My concerns are obviously more to do with data security than privacy as I believe we have already completely compromised privacy and are unlikely to get it back. I still worry that this system could be used as a backdoor into the police database, they only seem to think they can reduce likelihood and obviously the industry standard hasn't been good enough of late, but I mainly object to TM carrying any sort of data about whether address-verified members are licence holders since that data could notionally be for sale at some point in the future.

Originally Posted by Jexla

Who was talking exactly?

The talk was within the gun trade, after the fake license debacle at Gun city, who actually did nothing wrong.

So they send the license number ( which the police can relate to you name ) and a unique marker ( so that if the e mail is read by someone who should not have access, would mean nothing) as to saying it is relation to a firearms auction ?, why else would you want to check there license is valid.

I don't really care if Tradme want extra protcols to check the validity of gun licences for fire arms purchases. I have far more to worry about with the B/P being my neighbours

Could get rough, that's Mongrel Mob territory up Napier/Hastings way

This thread is quite misleading, they do not appear have a data base, they appear to have a system to send a number through to police to get a y/n on valid license. I cant see the harm or am I missing something?

Originally Posted by Paddy79

I don't really care if Tradme want extra protcols to check the validity of gun licences for fire arms purchases. I have far more to worry about with the B/P being my neighbours

what is B/P ???

Originally Posted by gonetropo

what is B/P ???

Black Power

Originally Posted by Gibo

This thread is quite misleading, they do not appear have a data base, they appear to have a system to send a number through to police to get a y/n on valid license. I cant see the harm or am I missing something?

Yah the title is pure sensationalism

Originally Posted by Renaissance Caveman

I hit up popo about this as soon as I got the newsletter from TM announcing it:



Their reply:



My concerns are obviously more to do with data security than privacy as I believe we have already completely compromised privacy and are unlikely to get it back. I still worry that this system could be used as a backdoor into the police database, they only seem to think they can reduce likelihood and obviously the industry standard hasn't been good enough of late, but I mainly object to TM carrying any sort of data about whether address-verified members are licence holders since that data could notionally be for sale at some point in the future.

This could all ready easily be done man. Mine user info then check everyone who has made a sale or bought a gun and sell that list. Would be long enough to keep any criminal organisation very busy for a long time. This system adds security without any real extra risk.

Also it's worth noting that it's pretty hard to hack an I eternal system like that and that most of that sort of data leak happens at the head office, either by someone visiting the building, but more commonly by a pissed off staff member.

Originally Posted by small_caliber

Well this is a cutnpaste from another forum regarding a reply from TM regarding a question put to them

Thanks for your question which you sent on 27 August 2017. To clarify, you asked: "Can you confirm that the only information supplied to the police in a license check is the license number and persons name. I.e. Are you also supplying them the auction number, whether the query you are sending to them relates to a question, bid or buy now etc?"

Trade Me will be operating an API to query the Police database with the license number and a unique identifier (not the person's name). The query will also include whether or not the use of the firearms license relates to a purchase, sale or enquiry (a question on an auction). The auction number is not supplied.

I trust this satisfies your request. If you would like additional information, please have a read of our Trust & Safety blog. http://www.trademe.co.nz/trust-safet...arms-database/

Regards,

Eve

Trade Me Support
http://www.trademe.co.nz

So that muddys the water about only name and license number sent, what happens to the additional information sent?

This means that the police are going to be recording ALL of these requests. Why else would they care if you were bidding on a firearm, or asking a question, making a bid, buying a firearm, or selling a firearm?