Live data from Hacker News

Show HN: Startup with no website - GuerillaClick@gmail.com

news.ycombinator.com

41–50 of 190 posts

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#41
post #33
post #23

This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.

It's no crazier than using any other disposable email service... if I'm registering an account at neopets.org or whatever I probably just don't care.

wow, sites like neopets.org still exists :)

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#42
post #29

Earlier quoted context omitted.

> You can use Mailinator to do this already While I'm a fan of Mailinator and their approach, I think the feature OP has about auto-clicking verify is unique. But yes, to do this right, you need the multi-domain approach of Mailinator instead of just aliases. Maybe Mailinator has an API or supports POP/IMAP that would make this possible, I haven't checked.

Last I checked it appeared like Mailinator's POP3 support was completely removed, and API access requires a subscription. It was priced way above what I was willing to pay (I think $150/mo)

Also Mailinator is banned by multiple sites and I feel like that number is increasing (anecdata). Which means it's getting less and less useful for the purpose of "burner" email addresses.

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#43

Earlier quoted context omitted.

I will call support to notify them my e-mail (with a + in it) isn't working, like I have done before. No I don't have another e-mail address. Yes, this is really my e-mail address.

To be fair, I would assume/hope the implementation is gmail specific and just truncs the + part only when doing uniqueness validation. Granted its effectiveness is small.

[deleted]

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#44

Earlier quoted context omitted.

That is essentially losing 1 customer vs handling thousand spammers.

Except people use aliases to protect themselves from spammers - who frequently buy or steal e-mails from companies like the one you're considering.

Then better alternative would be to develop a unique mail check functionality ignoring the + part. Maybe that could work for both sides.

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#45

Thanks, just spent five minutes modding my webapp to disallow email aliases.

Well surprise, I actually use that feature in real life with my real email.

It is really helpful if you want multiple profiles for a service (ex. Different mode, different recommendation) or in filtering all emails sent to that specific address (can't filter with the "from" as I don't know who is emailing me)

Please don't break standards

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#46

Seems like the perfect one to get one's account stolen

Throwaway/shared e-mail addresses are not for accounts you care about, they're for working around stupid requirements to register "for free" to access a resource you need.

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#47

Thanks, just spent five minutes modding my webapp to disallow email aliases.

That's downright silly and a user hostile move, IMO (why at all wouldn't you want someone to test things out without having to give one of their main email address?). Your solution seems to assume that everybody uses only Gmail and Gmail plus addressing. Gmail also considers dots/periods in addresses as not existing. Try blocking those too (no, actually don't try this!). There are so many temporary or disposable email services that you'd be wasting your time trying to disallow all those. Your time could instead be better spent on making your product or service more attractive to paying customers.

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#48
Just make sure that account is not associated with any of your real data (even IP). There have been horror stories at /r/TIFU about people getting their personal accounts suspended and the whole enterprise account with them.

If Google gets angry about you, your life MIGHT be ruined –partially–

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#49
post #41
post #33

Earlier quoted context omitted.

It's no crazier than using any other disposable email service... if I'm registering an account at neopets.org or whatever I probably just don't care.

wow, sites like neopets.org still exists :)

I mean, either it doesn't or that's not the URL... I just pulled the name from a hat.

Re: Show HN: Startup with no website - GuerillaClick@gmail.com

#50
post #23

This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.

In that regard though, it's not different to existing throwaway email services. I'd use this sort of thing for registering for annoying things like "free" wifi.

Most free wifi hotspots don't verify your email fyi
Post reply on HN