71–80 of 96 posts
Earlier quoted context omitted.
There's a whole industry around detecting these and placing them on block lists.
Could you recommend a few solutions or companies? I'm looking for such a solution at the moment. Thanks!
I remember using spamgourmet service back in the day, and it had a feature for forwarding emails with an implicit counter. So foo.c@spamgourmet.com would be forwarded three times (c=3), and the rest would be eaten.
Earlier quoted context omitted.
In your ideal world we would be all be: - Be hooked to a bunch of paid plans for stuff that's currently free. - At the mercy of all the big providers that could one day just decide to turn our account off without a reason. - Receive more spam than we currently do as all service providers would have our email addresses. Although these would all be aliases, we would have to spend a decent amount of time organizing fold…
> At the mercy of all the big providers that could one day just decide to turn our account off without a reason. This had me genuinely concerned when a lot of the superfuous account bans were happening on Twitter and Facebook around the 2020 election cycle. Retweeting a joke could knock you off, and I'd been using Twitter as a 2FA for many/most sites where it was offered at the time. Now, I'm much more inclined to ch…
Imagine having to tell someone that you can't access your accounts because you retweeted something that wasn't deemed acceptable.
Perhaps if we're lucky we will advance to having the big corps create a social credit system for us as well, ha!
Earlier quoted context omitted.
Again, wouldn't it be easier for the attacker to just buy a domain and use that completely undetected instead of having to use a rate-limited disposable email service?
You're assuming they're doing it hundreds of times a minute. Often they're signing up for the accounts by hand to get through the captchas. The rest of it can be automated
In this day and age I don't understand why they wouldn't be able to just use a headless browser instead of doing it manually - has labor really become this cheap?
Earlier quoted context omitted.
That's great advice and although there's already an open source solution available, there's some hassle involved in setting it up. I will definitely look into these solutions and although I've seen some of them around, there could maybe be a way to implement a better alternative that's both easy to use and safe so it doesn't get abused.
I don't think I would pay for temp email service, or be bothered to set up open source one by myself. But if I could buy a throwaway domain name from company that specializes in temp emails as a package deal, then I would be tempted.
Earlier quoted context omitted.
Could you recommend a few solutions or companies? I'm looking for such a solution at the moment. Thanks!
I've never evaluated any myself, but became acutely aware of them after launching my own temporary mail service as a learning exercise. I think there's a github repo somewhere that's regularly updated with a block list of these cycled domains though.
Feel free to share a link to your service as I'd love to check it out and best of luck running it also!
The only feature temp mail service should focus on having tons of domains. Many temp mail domains are blacklisted. only way to get around is rotating the domain name everyday. I will give it a try.
The fact they constantly have to rotate to avoid blocks is because they are used for abuse and are attempting to essentially attack network services. Something like private aliases attached to a real account you actually have adds privacy, but retains accountability. (You can create aliases on Proton, Fastmail, Outlook, etc. but they are attached to your real account so abuse is manageable.) A service rotating tempor…
Earlier quoted context omitted.
The fact they constantly have to rotate to avoid blocks is because they are used for abuse and are attempting to essentially attack network services. Something like private aliases attached to a real account you actually have adds privacy, but retains accountability. (You can create aliases on Proton, Fastmail, Outlook, etc. but they are attached to your real account so abuse is manageable.) A service rotating tempor…
I don't agree with this and I think the right approach is to simply not require visitors to give up their email accounts if they don't want to. If you want to block a malicious attacker, then you can use a captcha. A serious malicious attacker wouldn't have a problem paying a few dollars to buy a domain, creating a catch-all address and if he wants to take it one step further he can even have it look like a legitimat…
Most such services are blacklisted, or very soon to be blacklisted. You can use Gmails and rotate them, and use "." "+" "number" tricks though, but typically, use Gmails is the way to do.
Earlier quoted context omitted.
You're assuming they're doing it hundreds of times a minute. Often they're signing up for the accounts by hand to get through the captchas. The rest of it can be automated
That's what I would assume most of them are doing, yes. In this day and age I don't understand why they wouldn't be able to just use a headless browser instead of doing it manually - has labor really become this cheap?