Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
1–10 of 11 posts
Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#2Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#3German language only unfortunately https://media.ccc.de/v/39c3-verlorene-domains-offene-turen-w...
Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#4There was a CCC talk with a similar approach, where researches bought expired government domains and typo / bit flip domains. For example: bund.de is managed by the German Federal Government and they purchased bund.ee, the Estonian TLD, which is both a typo and bit flip and started watching email and DNS requests coming in. German language only unfortunately https://media.ccc.de/v/39c3-verlorene-domains-offene-turen-…
Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#5Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#6It's easy to be a bad actor given the conditions that the internet was built on.
Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#7There was a CCC talk with a similar approach, where researches bought expired government domains and typo / bit flip domains. For example: bund.de is managed by the German Federal Government and they purchased bund.ee, the Estonian TLD, which is both a typo and bit flip and started watching email and DNS requests coming in. German language only unfortunately https://media.ccc.de/v/39c3-verlorene-domains-offene-turen-…
This was a great one. The bit flipped domains idea is incredible.
Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#8Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#9Same thing with the example.com domain until RFC 2606 put an end to it.
Re: Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
#10There're a couple of people with my name, one in Arkansas and another in South Carolina, and I get all sorts of email for them. They include their middle initial, but many people forget to include that middle initial, so I get utility bills, medical records, all kinds of things. Most of the time I delete it, but.. I feel kind of bad