21–30 of 180 posts
Email is still plain-text within an xml document referenced in the page source.
Email is still plain-text within an xml document referenced in the page source.
I would like to push back on the idea that you should obfuscate your email address at all. My email addreas is danny@spesh.com. I get a lot of spam -- possibly, since I have been distributing that address deliberately on the web and inadvertently in hacked datadumps, a near maximum amount of spam. But the benefits of having people easily find a way to contact me directly has for me far outweighed the (largely solved)…
Earlier quoted context omitted.
Yes, but these scrapper bots aren't that sophisticated.
But they will be as soon as this sees widespread use.
I would like to push back on the idea that you should obfuscate your email address at all. My email addreas is danny@spesh.com. I get a lot of spam -- possibly, since I have been distributing that address deliberately on the web and inadvertently in hacked datadumps, a near maximum amount of spam. But the benefits of having people easily find a way to contact me directly has for me far outweighed the (largely solved)…
This is appropriate advice for the average HN reader. For everyone else, probably not. I've seen first hand otherwise intelligent people being unable to discern an obvious (to me) online scam from a legitimate business. These are the people spammers are targeting. These are the people that need to obfuscate their email address.
> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable NoScript on Firefox with default settings don't render tags (replaces them with placeholders), so this technique doesn't work here. https://imgur.com/2tCAgAf
Earlier quoted context omitted.
I think that nowadays most spam lists come from data breaches and address-collecting malware. It's cheaper than running a bot to scan the web for addresses. We get spam on addresses that were never published online.
I think so too. And I think the majority of data breaches that have lead to spam for me are from ages ago, from random services I signed up for as a teenager. For a few years after that I did the "+" Gmail alias thing, to try to filter and catch companies. But I realised that's easy and obvious to strip, so it wasn't worth the effort (although I have caught PayPal leaking my email somehow).
> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable NoScript on Firefox with default settings don't render tags (replaces them with placeholders), so this technique doesn't work here. https://imgur.com/2tCAgAf
[flagged]
Does the fact someone independently discovers Gauss method to sum up all the numbers 1...100 today make it worth sharing?
My point is that this is a primitive and easy to break workaround and better methods exist.
> even when a human visitor has their JavaScript turned off, the email address displayed on the page remains usable NoScript on Firefox with default settings don't render tags (replaces them with placeholders), so this technique doesn't work here. https://imgur.com/2tCAgAf