291–300 of 557 posts
Earlier quoted context omitted.
You never use the bare address. If it gets stripped then it gets binned.
What do 'bare address', 'stripped', and 'binned' mean in this context?
Then, if the spammer strips (removes) that part, it gets sent to the trash (binned).
Earlier quoted context omitted.
> Unique-per-service email addresses work pretty well as a canary for breaches I do this too, but it taught me everything is breached - the local ambulance service, the local computer store, the local car share, small businesses overseas that I've placed orders with. Some of the big names don't seem to be, which is lucky because otherwise I'd be wondering if it was the ISPs that had been breached. Either large chunks…
Oddly enough I have had the opposite experience. I have been running per-service emails for 10 years and wonder to myself if it is worth the bother as I can recall only one ever spreading.
Earlier quoted context omitted.
how so? when a card is fraudulently used to make purchases, AmEx is not refunding you from their own pockets. they take back the money from the merchant it was fraudulently spent with (a chargeback). no loss at all on their side.
Which is then passed on to customers through slightly higher prices for goods.
Earlier quoted context omitted.
How do you guys do this? IS there a service? Do you add na.melast@gmail Or do you create them on your own domain through the hosting company?
You can use anything after a + character with Gmail. E.g. myaddress+service1@gmail.com will go to your inbox and you can filter on it.
What really bothers be about this is that Dropbox hasn't bothered to reset the sessions. Even after I manually reset my password (which I wasn't prompted or forced to do btw), all my apps (iPhone, desktop etc) that have existing sessions wasn't expired. So for all I know, a hacker might already have an open session to my Dropbox and changing the password will not fix that Clarification edit: I did receive the e-mail…
I'm a lead at Syncplicity, a prominent competitor. Early in my career at Syncplicity I changed all of our desktop clients to use long-lived sessions that do not reset when the user's password is changed. For us, this is deliberate for a few reasons. Most of our customers authenticate via their employer's SSO (single sign on) and do not use any Syncplicity password management. We also do not believe that routine passw…
What really bothers be about this is that Dropbox hasn't bothered to reset the sessions. Even after I manually reset my password (which I wasn't prompted or forced to do btw), all my apps (iPhone, desktop etc) that have existing sessions wasn't expired. So for all I know, a hacker might already have an open session to my Dropbox and changing the password will not fix that Clarification edit: I did receive the e-mail…
I'm a lead at Syncplicity, a prominent competitor. Early in my career at Syncplicity I changed all of our desktop clients to use long-lived sessions that do not reset when the user's password is changed. For us, this is deliberate for a few reasons. Most of our customers authenticate via their employer's SSO (single sign on) and do not use any Syncplicity password management. We also do not believe that routine passw…
Since lots of people will be rotating passwords, this is probably a good time to set up Two-Factor Authentication (2FA) as well. I recommend Authy as your 2FA app, as it lets you set a backup password, which you can use to move your 2FA tokens between devices. For your critical services, keeping encrypted copies of your backup codes is a must.
2FA is a major inconvenience. The login process goes from 1-2 sec to 30sec. Sometimes a lot longer (some 2FA do not seem to think it is critical to send the email or txt msg right away, and even when they do, email servers do not really work real time, and then you have the time it takes to find your phone, unlock, decline twice the iOS update prompt, go to the right app, find the right msg, copy the code, check it i…
That's not such a high penalty so that devices you've physically used are authorized and all others aren't.
Earlier quoted context omitted.
How do you guys do this? IS there a service? Do you add na.melast@gmail Or do you create them on your own domain through the hosting company?
I have a wildcard redirect so that @mydomain.com is forwarded to me. That way whenever I sign up for a service I just use, e.g., dropbox@mydomain.com.
Earlier quoted context omitted.
How do you guys do this? IS there a service? Do you add na.melast@gmail Or do you create them on your own domain through the hosting company?
You can use anything after a + character with Gmail. E.g. myaddress+service1@gmail.com will go to your inbox and you can filter on it.
My earlier hypothesis was that this was on purpose, to make sure you don't use a filter on any email they might send. But these days I'm tending to think it's just a bad regexp on their side.
Earlier quoted context omitted.
> Unique-per-service email addresses work pretty well as a canary for breaches I do this too, but it taught me everything is breached - the local ambulance service, the local computer store, the local car share, small businesses overseas that I've placed orders with. Some of the big names don't seem to be, which is lucky because otherwise I'd be wondering if it was the ISPs that had been breached. Either large chunks…
How do you guys do this? IS there a service? Do you add na.melast@gmail Or do you create them on your own domain through the hosting company?