Thanks, just spent five minutes modding my webapp to disallow email aliases.
But, then you are not complying with standard email, are you? See https://tools.ietf.org/html/rfc3696#section-3
Show HN: Startup with no website - GuerillaClick@gmail.com
81–90 of 190 posts
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#82This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.
not to mention the damn google dot hack that still works with all gmail email accounts...
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#83Doesn't mailinator (mailinator.com) already do this ?
some sites prevent mailinator accounts on signup
Truth. All ephemeral/temporary/one-time mailboxes suffer from the same issue - once enough people start using it, the website owners take notice and it's blacklisted.
It'd be nice if you could create temporary accounts on the fly. User provides a captcha solve, your service uses this to create a random account & log in, user can view inbox or click 'open all links'. This wouldn't work with gmail because of SMS verification but would probably work on other domains and circumvents the above problem.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#84Beautiful.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#85You can use Mailinator to do this already, you can see all of their inboxes on their website and you can use all of their domains to bypass domain restrictions. For example I might use somethingsilly@bobmail.info and it will be redirected to https://www.mailinator.com/v3/index.jsp?zone=public&query=so...
> You can use Mailinator to do this already While I'm a fan of Mailinator and their approach, I think the feature OP has about auto-clicking verify is unique. But yes, to do this right, you need the multi-domain approach of Mailinator instead of just aliases. Maybe Mailinator has an API or supports POP/IMAP that would make this possible, I haven't checked.
If the site you are trying to login in to blocks mailinator, use @notmailinator.com
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#86Did you get the idea from GuerrillaMail? https://www.guerrillamail.com/
More and more services recognize disposable e-mail domains and don't allow such addresses. Obviously they can't block the gmail.com domain. I like the idea, but it probably is against Google's TOS, so there's that ...
Theoretically if this guerillaclick@gmail gets popular, I'm sure services can just specifically block guerillaclick+anything@gmail right?
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#87what about the gmail receive limit? its 60 emails per minute or about 80k per day if you hit 1 minute over 60 you get blocked 24h
That seems like it would be incredibly easy to DoS someone.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#88This is delightfully crazy. Give some random guys with no website your registration record somewhere, allow them to verify your registration as theirs, and then impersonate you, reset passwords, see any communications, possibly log in as yourself and do anything. All this with no recourse. Nigerian spammers moan from envy for such a brilliant self-propelled gullibility filter.
and it pollutes the googleborg no less, by using a gmail account.
occasionally people (accidentally?) use my (long-in-disrepair) gmail account in this way, and it's amusing to see their little peccadillos. sometimes you get the devilish chance to change subtle details of an online profile =D
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#89Interesting, I've a few questions as food for thought. - Is it allowed under GMail's TOS? - Have you considered the security implications of having what is presumably a server somewhere in your name clicking on any link that's sent to it? - You say startup - do you have monetization plans? Putting adverts on the associated website perhaps?
>Is it allowed under GMail's TOS?
Do you even have to ask? The answer is a clear 'NO'. There is zero chance that Google will allow you to abuse their email service in this way.
I hope OPs personal account isn't in anyway related to this account because when 'guerillclick@gmail' is inevitably banned, his personal account may be collateral damage.
Re: Show HN: Startup with no website - GuerillaClick@gmail.com
#90guerillaclick+eralp@gmail.com guerillaclick+sdfaskdma@gmail.com guerillaclick+111@gmail.com
Unfortunately, more and more services are rejecting + e-mail addresses. Either ignoring them, or flagging them as an error.
While it's perfectly within the RFC, companies are catching on to the trick.
(3M, I'm looking at you!)