Live data from Hacker News

Show HN: NBox – Sign up anywhere without giving your email address

nbox.notif.me

191–200 of 212 posts

Re: Show HN: NBox – Sign up anywhere without giving your email address

#191
Why does it feel like I am the only one using plus sign (+) feature supported by SMTP standards?

http://www.faqs.org/faqs/mail/addressing/index.html

TL;DR - Most SMTP servers support delivering mail to addresses like foo+bar@email.com, in which case it will be received by foo@email.com. You can specify whatever string of alphanum chars you'd like after the plus sign.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#192
post #191

Why does it feel like I am the only one using plus sign (+) feature supported by SMTP standards? http://www.faqs.org/faqs/mail/addressing/index.html TL;DR - Most SMTP servers support delivering mail to addresses like foo+bar@email.com, in which case it will be received by foo@email.com. You can specify whatever string of alphanum chars you'd like after the plus sign.

Normally I only read on HN, but you got me logging in, upvoting and commenting! Probably most people just don't know about the standard. (As it is probably with most standards).

Anyways, thanks for your hint.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#193
post #191

Why does it feel like I am the only one using plus sign (+) feature supported by SMTP standards? http://www.faqs.org/faqs/mail/addressing/index.html TL;DR - Most SMTP servers support delivering mail to addresses like foo+bar@email.com, in which case it will be received by foo@email.com. You can specify whatever string of alphanum chars you'd like after the plus sign.

I've hit enough sites that refuse to accept a + in email addresses that I gave up using it, on the basis that I couldn't remember whether or not I was using it, per site. Standard it may be, but so many sites have bad email address validation.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#194
post #190

Earlier quoted context omitted.

I toyed with the idea of using a catch-all, but couldn't get around the problem of having to occasionally send mails from the address (e.g. for customer support, etc - as another commenter mentioned). Recently I came up with another solution that I know some have used: Stick to one email address and have a whitelist. Anything not in the whitelist is "spam" (including irritating LinkedIn emails, etc). If I get email f…

> I toyed with the idea of using a catch-all, but couldn't get around the problem of having to occasionally send mails from the address (e.g. for customer support, etc - as another commenter mentioned). You know, the sender header is just a text string... What stops you from putting whatever e-mail alias you registered with as sender, for those occasions?

>What stops you from putting whatever e-mail alias you registered with as sender, for those occasions?

Cognitive load. I don't want to:

1. Think about it. 2. Figure out which email address goes with which To: field. 3. Find a way to automate all this.

In the end, my solution would be less work to get rid of unwanted emails than using a catch-all. Why should I do the extra work in maintaining the system, when the sender can do the tiny amount of extra work instead? More fundamentally, why should anyone feel they have the right to just insert anything into my inbox? I should control the inbox - not them.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#195
post #191

Why does it feel like I am the only one using plus sign (+) feature supported by SMTP standards? http://www.faqs.org/faqs/mail/addressing/index.html TL;DR - Most SMTP servers support delivering mail to addresses like foo+bar@email.com, in which case it will be received by foo@email.com. You can specify whatever string of alphanum chars you'd like after the plus sign.

Hi kchr, no you're not the only one to use the plus sign. As already discussed in this feed, the + part can easily be removed by spammers.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#196
post #176
post #169

Earlier quoted context omitted.

Companies/organisations whose data leaks I have discovered through spam to single-use addresses: * monster.com * linkedin * Pragmatic Programmers (pragprog.com) * audioscrobbler (now part of last.fm) * The London Cycling Campaign * The Economist's subscription department

* Dropbox * Adobe * ... The list is long!

You need to discern between companies nefariously sharing your email without your permission and those that were the victim of hacks. Dropbox and Adobe were, of course, both thoroughly penetrated and the exfiltrated logins including email addresses are widely available.

These aren't small numbers, either. We're talking about 68 million logins for Dropbox and 150 million for Adobe. To put those huge numbers in perspective, combined that's over half the population of the USA.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#197
post #191

Why does it feel like I am the only one using plus sign (+) feature supported by SMTP standards? http://www.faqs.org/faqs/mail/addressing/index.html TL;DR - Most SMTP servers support delivering mail to addresses like foo+bar@email.com, in which case it will be received by foo@email.com. You can specify whatever string of alphanum chars you'd like after the plus sign.

+1

Sorry, couldn't resist. I got burned by this, I used it to sign up to a newsletter, and when I tried to unsubscribe, I kept putting in my actual email address with no results. Took me two weeks to think of checking the "to" field and realising I'd used a plus address

Re: Show HN: NBox – Sign up anywhere without giving your email address

#198
post #2

Hi, I'm David, one of the developers of nBox. nBox generates for you an email address for each site, for free. - Effortlessly thanks to our browser extensions - Addresses are anonymous and private - Delete the addresses you don't want any more - Be notified according to your preferences on each email I'm looking to share the service. Any feedback is very welcome. Thanks!

Can you say something from the service perspective?

Why shouldn't a service flag you as malicious and refuse users with email from your domain?

What do you do to prevent mass account creation on the service?

Thanks!

Re: Show HN: NBox – Sign up anywhere without giving your email address

#199
post #2

Hi, I'm David, one of the developers of nBox. nBox generates for you an email address for each site, for free. - Effortlessly thanks to our browser extensions - Addresses are anonymous and private - Delete the addresses you don't want any more - Be notified according to your preferences on each email I'm looking to share the service. Any feedback is very welcome. Thanks!

Can you say something from the service perspective? Why shouldn't a service flag you as malicious and refuse users with email from your domain? What do you do to prevent mass account creation on the service? Thanks!

Hi ecesena,

> Why shouldn't a service flag you as malicious and refuse users with email from your domain?

Some services might block our addresses some day, but that would be a mistake because nBox is not a disposable email service.

> What do you do to prevent mass account creation on the service?

If your question is in regard to services which might block us, I don't think they care about mass account creation, a few email addresses are enough to bypass limits on emails.

Re: Show HN: NBox – Sign up anywhere without giving your email address

#200

Earlier quoted context omitted.

I did that, too. Used a catch-all and just subbed to things with a new e-mail address, relying on the catch-all to put it all into one box. Big mistake. First off, I got FLOODED with e-mail bounce-back spam because spammers send e-mail with forged From: headers and I'd get all the errors. Second, I discovered that nobody is actually selling my e-mail address except for one gaming forum I used years ago. Not even Face…

You could have solved the second problem by storing the email with the login and password in a password manager. Maybe they were not a thing yet when you started this experiment. The third problem is more serious. I use Thunderbird. I googled and there are a couple of addons that makes it easy to edit the from address without having to create new Thunderbird identities. https://github.com/absorb-it/Virtual-Identity h…

Yeah, I started this back in 2003. I imagine password managers existed back then, but they certainly weren't as common.

These days I don't even use Thunderbird. I just have gmail retrieve all my e-mail from my POP3 server. Though FWIW, I still have Thunderbird installed with all my e-mail going back to 2003. I imagine there's a way I could capture every e-mail address I've used then manually go to each web site and change my registered e-mail address.

Post reply on HN