171–180 of 190 posts
Earlier quoted context omitted.
That seems like it would be incredibly easy to DoS someone.
Indeed it is.
This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.
Hey stupid mailing list, I never wanted you. Have more garbage.
Earlier quoted context omitted.
I don't know if it still does it, but mailinator used to have a neat feature where it would "detect" bots trying to scrape its list of domains and start injecting legit ones like hotmail.com/gmail.com
you don't need to scrape anything. you check provided email for mailinator's MX records\IPs.
Why do you call this a "startup"? It's a nice hack for sure but I'm not sure if it's has a prospect of being a business.
If the Yo app can raise 1.5 million...
The iOS app might still work but the watchOS app hasn’t been updated for 5.x. :-(
Earlier quoted context omitted.
Gmail gives you another option - separate using dots. g.uerillaclick@gmail.com The number of options is of course limited but it's still recognized as a separate address while still coming into the same inbox
I've built a few registration systems and always normalize email addresses (remove local part, de-dot gmail addresses) at signup and login. It helps users who keep trying bobjones@gmail.com when they signed up with bob.jones@gmail.com. Also is pretty good at preventing mass signups using tricks like this.
Also, how do you deal with spam filters that are designed to spam anything without a local part? Or is this only done to "well-known" domains like gmail.com?
Earlier quoted context omitted.
Google TOS is pretty broad. However, one of the main factors here is that export controls could quickly come into play. Since Google is US-based, providing this service for those in embargoed countries could get you shut down quickly. They also have a "don't misuse our services" clause and I'm sure this would count as misuse if found.
Let me answer this: from what I know, and broadly speaking, this service is both illegal and not allowed by ToS.
.. in your country. Saying something is illegal without mentioning jurisdiction is meaningless.
> not allowed by ToS
The service being signed up to, perhaps. But it isn't clear to me that it's banned by gmail's tos especially since he's using the service APIs normally.
Earlier quoted context omitted.
You can assume that the companies selling off email data are smart enough to do the entirely trivial "remove + sign to @ sign" transformation for gmail addresses, at least partly because their job tends to be tracking you across a large amount of domains.
I switched to mails under domain I own (and powered by FastMail) some time ago; I now use alias@username.mydomain form. Try to filter for that without breaking non-aliased e-mails!
Thanks, just spent five minutes modding my webapp to disallow email aliases.
The problem is that you are no longer compliant with the email spec: https://tools.ietf.org/html/rfc5322#section-3.2.3 Does nobody read RFC’s anymore?
I did, before posting my answer, though I admit I was too lazy to look up the email RFC and instead just used the URI RFC and assumed the allowed characters in the user-name would be the same :P
guerillaclick+eralp@gmail.com guerillaclick+sdfaskdma@gmail.com guerillaclick+111@gmail.com Unfortunately, more and more services are rejecting + e-mail addresses. Either ignoring them, or flagging them as an error. While it's perfectly within the RFC, companies are catching on to the trick. (3M, I'm looking at you!)
Gmail gives you another option - separate using dots. g.uerillaclick@gmail.com The number of options is of course limited but it's still recognized as a separate address while still coming into the same inbox