Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why was my email leaked?

forums.dropbox.com

Post reply on HN
Print view View original

111–120 of 265 posts

Re: Why was my email leaked?

#111

Post by bti »

jey wrote: post #95
tokenadult wrote: post #84

Earlier quoted context omitted.

When I try subaddressing as I try to sign up for new online services, more often than not that address format is rejected as invalid. Most online services don't have very good email validation.

Use a whole domain name, e.g. signup for dropbox with dropbox@tokenadult.com. You could do this with Google Apps Gmail by setting a catch-all forwarding address for the domain.

Wouldn't it be better to setup a new nickname/alias for your account? A bit tedious but then you wouldn't be getting every single xxxxx@example.com

Re: Why was my email leaked?

#112

Post by ios84dev »

tokenadult wrote: post #84
danielweber wrote: post #34

Earlier quoted context omitted.

The way some people do "fredsmith+amazon@gmail.com" as proof that it must be amazon that leaks their passwords has some issues. The guy who says that he had a truly random bunch of letters as his dropbox account is probably a better indicator, but it's hard to know if the guy ever leaked it himself. Doesn't excuse the moderators being jerks, though.

When I try subaddressing as I try to sign up for new online services, more often than not that address format is rejected as invalid. Most online services don't have very good email validation.

I changed my mail server to accept . instead of +'s so now the emails I generate work through pretty much any validation.

Re: Why was my email leaked?

#113

Post by Ziomislaw »

tokenadult wrote: post #84
danielweber wrote: post #34

Earlier quoted context omitted.

The way some people do "fredsmith+amazon@gmail.com" as proof that it must be amazon that leaks their passwords has some issues. The guy who says that he had a truly random bunch of letters as his dropbox account is probably a better indicator, but it's hard to know if the guy ever leaked it himself. Doesn't excuse the moderators being jerks, though.

When I try subaddressing as I try to sign up for new online services, more often than not that address format is rejected as invalid. Most online services don't have very good email validation.

It's actually _not_ because their validation sucks, but because salespeople decided that it means you won't read their newsletter or other spam. They understand the situation as - hi, this is my email please use that subaddress so I can mark it as spam (yes, I know that spam filters don't need subadresses - but try to explain it to an average salesdude - I've tried).

Re: Why was my email leaked?

#114

Post by mbreese »

minm wrote: post #49
inovica wrote: post #20

Earlier quoted context omitted.

Yeah thats exactly what happened :) No other way to contact them and the account manager I dealt with hasn't responded either. Just counted and I've sent them 6 emails so far and zero response. Its such as shame as I have raved over Dropbox (partly as its Python which I also love), have 4 Pro accounts with my team and we were looking to sign up with 15 users to a Teams account. Looks like I'll be moving somewhere els…

Check out Tonido Cloud ( http://www.tonido.com/cloud/ ) and host your own dropbox.

Are you affiliated with Tonido, or just really into Dropbox alternatives? Your submission history seems a little too focused.

Re: Why was my email leaked?

#115

Post by chmars »

Sean B.:

Hi there,

We’ve been looking into these spam reports and take them seriously. Back in July we reported that certain user email addresses had leaked and some users had received spam as a result. At this time, we have not seen anything to suggest this is a new issue, but remain vigilant given the recent wave of security incidents at other tech companies. If you’ve received spam to an email account you only use for Dropbox, please send the message (including full headers) to support-security@dropbox.com to help our ongoing investigation.

Separately, we want to apologize for some of the dismissive responses from our volunteer moderators - since they aren’t employed by Dropbox, they don’t have visibility into issues like this. We want you to know that we've taken these reports seriously and began our investigation immediately.

https://forums.dropbox.com/topic.php?id=97303&page=2#pos...

Re: Why was my email leaked?

#116

Post by sordidfellow »

chmars wrote: post #115

Sean B.: Hi there, We’ve been looking into these spam reports and take them seriously. Back in July we reported that certain user email addresses had leaked and some users had received spam as a result. At this time, we have not seen anything to suggest this is a new issue, but remain vigilant given the recent wave of security incidents at other tech companies. If you’ve received spam to an email account you only use…

I'm just relieved that they realized the moderator[s] were being dismissive. I'm not sure that it's a new breach, but it does look like something is going on...

Re: Why was my email leaked?

#117

Post by neogodless »

Mahn wrote: post #22

I just checked the spam folder of a gmail account I used for dropbox. Throughout the years I'd ocasionally (maybe once every two months or so) check the spam folder merely out of curiosity, but it was practically always empty. Perhaps this is just a huge coincidence but I see three spam emails sent today plus another two sent this week. Some of them have cc recipients which seem legit addresses of other people, but I…

Whoa - yeah my spam folder has two sent to "dropbox.com@.com"

From ".Вишняков@direct.nacha.org" and ".Белов@fdic.gov" with subjects of "Declined Direct Deposit payment" and "Update of the security software is required!"

I do get lots of "random" spam sent to addresses like "fcbb3a43@.com" but I can't believe the moderators really think that a "random" guess would land on ".com@.com" sigh

Re: Why was my email leaked?

#118

Post by acoleman616 »

chmars wrote: post #115

Sean B.: Hi there, We’ve been looking into these spam reports and take them seriously. Back in July we reported that certain user email addresses had leaked and some users had received spam as a result. At this time, we have not seen anything to suggest this is a new issue, but remain vigilant given the recent wave of security incidents at other tech companies. If you’ve received spam to an email account you only use…

Coincidence that it came (relatively) right on the heels of "and you're on HN"...?

Re: Why was my email leaked?

#119

Post by qiemem »

kybernetyk wrote: post #7
Khao wrote: post #4

The way the moderators handled this was pretty damn bad. Two different users tell the moderator they use UNIQUE e-mail addresses for dropbox only, and they received spam roughly at the same time and yet the moderator answers by assuming the users are idiots.

Yup, especially Chris' behaviour is a no go. I don't know how the mods are affiliated with dropbox but if they are employees I wouldn't let them have any customer contact at all.

Sounds like they're volunteers, not employees: https://forums.dropbox.com/topic.php?id=97303&page=2#pos...

Re: Why was my email leaked?

#120

Post by pepr »

eli wrote: post #101
jey wrote: post #95

Earlier quoted context omitted.

Use a whole domain name, e.g. signup for dropbox with dropbox@tokenadult.com. You could do this with Google Apps Gmail by setting a catch-all forwarding address for the domain.

It's all fun and games until you get attacked by a spambot that tries blindly sending thousands of messages to @yourdomain.com

I have a setup like that, I get more spam because of that of course but Google is really good at filtering it. And especially in conjunction with priority inbox, it's a breeze (and very convenient).
Post reply on HN