Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why was my email leaked?

forums.dropbox.com

Post reply on HN
Print view View original

141–150 of 265 posts

Re: Why was my email leaked?

#141

Post by badgar »

driverdan wrote: post #104

I suspect this is a MUCH larger problem than people realize and not Dropbox's fault. I've noticed in the past few months I've been getting spam to a lot of site specific emails I've used under my Gmail catch all. It's as if a spammer had access to all email addresses I've used for incoming mail. I've talked with friends and found some have had the same problem. So where are spammers getting the email addresses we've…

> So what's causing this to happen?

4. You're leaking your own email addresses.

Start by looking for malware on every device you touch.

Re: Why was my email leaked?

#142

Post by zacksjoden »

nathanb wrote: post #92

Has anyone who created a Dropbox account AFTER July of 2012 noticed this spam increase? If not, it may be that the compromised list of addresses from summer of last year has finally reached evil hands.

I've signed up since then and haven't received any spam at all(also created a new email at the time).

Re: Why was my email leaked?

#143

Post by jewel »

CWilliams1013 wrote: post #109
jimktrains2 wrote: post #25

Earlier quoted context omitted.

He doesn't run a spam filter and he's using a catch all, therefore any email sent to any address on his domain will get to him. If someone was just trying things to see what worked he would see those emails.

This is not entirely true. A very large percentage of spam (70-90%) is stopped at or before the banner, at a layer he probably doesn't control (unless he runs his entire email infrastructure).

I do run my entire email infrastructure, in this case. During the time period where a lot of these spam messages were received, it was directly hosted on a enterprise fiber line, on its own IP address, which I wouldn't imagine was doing any sort of filtering.

I could be wrong and it's possible that some filtering was happening on the ISPs side, but you'd think that of the thousands of spams that get through, there would be some that looked like guesses.

Re: Why was my email leaked?

#144

Post by nolok »

qiemem wrote: post #119
kybernetyk wrote: post #7

Earlier quoted context omitted.

Yup, especially Chris' behaviour is a no go. I don't know how the mods are affiliated with dropbox but if they are employees I wouldn't let them have any customer contact at all.

Sounds like they're volunteers, not employees: https://forums.dropbox.com/topic.php?id=97303&page=2#pos...

Doesn't really matter for dropbox users though. They're the people the seller is putting in charge of being its face in the support place, and they're awful.

Re: Why was my email leaked?

#145

Post by matznerd »

mbreese wrote: post #114
minm wrote: post #49

Earlier quoted context omitted.

Check out Tonido Cloud ( http://www.tonido.com/cloud/ ) and host your own dropbox.

Are you affiliated with Tonido, or just really into Dropbox alternatives? Your submission history seems a little too focused.

Nice investigative work, he definitely seems affiliated...

Re: Why was my email leaked?

#146

Post by jfim »

bsg75 wrote: post #134
ph33r wrote: post #64

Earlier quoted context omitted.

Google Drive, SpiderOak, SugarSync, Skydrive, Amazon Cloud Drive, Box.net.

Which of these use client side encryption?

Spideroak does. Their GUI is really awful, but the commandline python script seems to work well.

Re: Why was my email leaked?

#148

Post by Flenser »

tokenadult wrote: post #84
danielweber wrote: post #34

Earlier quoted context omitted.

The way some people do "fredsmith+amazon@gmail.com" as proof that it must be amazon that leaks their passwords has some issues. The guy who says that he had a truly random bunch of letters as his dropbox account is probably a better indicator, but it's hard to know if the guy ever leaked it himself. Doesn't excuse the moderators being jerks, though.

When I try subaddressing as I try to sign up for new online services, more often than not that address format is rejected as invalid. Most online services don't have very good email validation.

I have anything sent to any address at my vanity domain forwarded to gmail. I use the name of the website and add e.g. ".shop@mydomain.tld" or ".bank@mydomain.tld" so I can apply different labels to them in gmail. It works great except I chose a .info domain which some sites don't recognise as valid.

Re: Why was my email leaked?

#149

Post by Shorel »

EvanAnderson wrote: post #29
xer0x wrote: post #13

Holy crap Dropbox's moderators make me want to terminate my account with them.

Reading that thread was painful. I always use custom one-off email addresses for services I sign-up for and. When I've attempted to report disclosure of my email address I'm almost always met with major skepticism. It's maddening. I used to enjoy the reactions I'd get from store clerks and telephone reps when I give them my email address. "Oh, how you have an email address with our company name in it?" In recent year…

That's what rot13 was created for.

dropbox email -> qebcobk@yourdomain.com

Re: Why was my email leaked?

#150

Post by codesuela »

paulhauggis wrote: post #135
tlogan wrote: post #19

Earlier quoted context omitted.

I call this "Google effect". Some companies started to think they can have crappy customer support because Google's support is crappy and Google is doing great. Actually Google is doing great despite their crappy support.

Amazon is even worse, especially for their sellers. They really don't care about their sellers at all and use bots/autoresponders for virtually all support.

Is that actually the case? I'm a Amazon Prime user (I mention that because I buy almost everything from Amazon :) and I whenever I got in touch with Amazon (Germany) the support was top notch and my issue was resolved very quickly. I am just a buyer though.
Post reply on HN