This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.
Show HN: Startup with no website - GuerillaClick@gmail.com
31–40 of 190 posts
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#32Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#33This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#34Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#35You can use Mailinator to do this already, you can see all of their inboxes on their website and you can use all of their domains to bypass domain restrictions. For example I might use somethingsilly@bobmail.info and it will be redirected to https://www.mailinator.com/v3/index.jsp?zone=public&query=so...
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#36Thanks, just spent five minutes modding my webapp to disallow email aliases.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#37Earlier quoted context omitted.
I use aliases to filter my email and also to see who sells my email address to third parties. All the websites I've used allow "+" in the email address so that's good.
You can assume that the companies selling off email data are smart enough to do the entirely trivial "remove + sign to @ sign" transformation for gmail addresses, at least partly because their job tends to be tracking you across a large amount of domains.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#38Thanks, just spent five minutes modding my webapp to disallow email aliases.
Does nobody read RFC’s anymore?
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#39Thanks, just spent five minutes modding my webapp to disallow email aliases.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#40Interesting, I've a few questions as food for thought. - Is it allowed under GMail's TOS? - Have you considered the security implications of having what is presumably a server somewhere in your name clicking on any link that's sent to it? - You say startup - do you have monetization plans? Putting adverts on the associated website perhaps?
They also have a "don't misuse our services" clause and I'm sure this would count as misuse if found.