Live data from Hacker News

Not OK Cupid – A story of poor email address validation

fastmail.com

21–30 of 123 posts

Re: Not OK Cupid – A story of poor email address validation

#21
Fastmail's masked emails are great! I honestly very rarely give out my "real" email. Usually when I sign up for something I create a masked email, or if I need an email on the spot I use a wildcard alias (xxxxxx@myalias.fastmail.com). Since most of my emails are random, it serves as an authentication additional factor.

Re: Not OK Cupid – A story of poor email address validation

#22
post #7

Earlier quoted context omitted.

On the other hand, I met my wife there and my two children wouldn’t exist if not for it. That said, the OkCupid of today and that of 2011 when I used it are probably quite different.

It probably started when they sold to The Match Group a while back. I used it a little back in 2014, and again in 2021. The second time around, it was very different. I don't know of any dating companies that focus on matching people versus optimizing for revenue.

Are you implying there are companies that don't focus on optimizing for revenue?

Re: Not OK Cupid – A story of poor email address validation

#23

Earlier quoted context omitted.

It probably started when they sold to The Match Group a while back. I used it a little back in 2014, and again in 2021. The second time around, it was very different. I don't know of any dating companies that focus on matching people versus optimizing for revenue.

Are you implying there are companies that don't focus on optimizing for revenue?

I mean, if I had the time, I would create a non-profit to do so.

And yes, there are probably small mom-and-pop types of businesses that just want to keep their status quo.

I believe I've heard a few years ago, that at least one country operates a dating service for their citizens. I can't find it now, but apparently the Tokyo Metropolitan Government just launched their own dating app, "TOKYO Enmusubi"

Re: Not OK Cupid – A story of poor email address validation

#24
post #7

Earlier quoted context omitted.

On the other hand, I met my wife there and my two children wouldn’t exist if not for it. That said, the OkCupid of today and that of 2011 when I used it are probably quite different.

Yeah from what I've heard it's nothing like it was in 2010-2014

OKCupid in those days had some really cool technical blogs about their processes that's worth reading.

https://web.archive.org/web/20101016050944/http://blog.okcup...

Re: Not OK Cupid – A story of poor email address validation

#25
post #21

Fastmail's masked emails are great! I honestly very rarely give out my "real" email. Usually when I sign up for something I create a masked email, or if I need an email on the spot I use a wildcard alias (xxxxxx@myalias.fastmail.com). Since most of my emails are random, it serves as an authentication additional factor.

Don’t de email domains get blacklisted or are they valid?

Re: Not OK Cupid – A story of poor email address validation

#26
post #19

Earlier quoted context omitted.

I do in Gmail, but half of them will never go in the spam folder such as from Credit Karma.

Had the same problem with Peacock despite constantly attempting to unsubscribe and mark spam. In the end I just created a filter rule to throw it in spam.

I can't find an opinion in Gmail to create a filter to "Always send it to spam". There's only "Never send it to Spam"

Re: Not OK Cupid – A story of poor email address validation

#27
post #7

Earlier quoted context omitted.

On the other hand, I met my wife there and my two children wouldn’t exist if not for it. That said, the OkCupid of today and that of 2011 when I used it are probably quite different.

It probably started when they sold to The Match Group a while back. I used it a little back in 2014, and again in 2021. The second time around, it was very different. I don't know of any dating companies that focus on matching people versus optimizing for revenue.

Unfortunately most consumers are unwilling to pay what something is worth to them. Businesses are often the same so it isn't just consumer behaviour.

Meeting the right person should be worth a lot, and we should be happy to pay thousands for that.

Of course the profit depends on the user statistics too: I'm not sure what the economic term for profit thresholds for power law masses versus targeting - where say lots of users with a low profits per user (say advertising) beats reasonable profits per user (say kagle).

Re: Not OK Cupid – A story of poor email address validation

#28

Companies that allowed others to create accounts with my email addresses: PayPal, Apple, Credit Karma, Walmart (I just forwarded the email to legal@ and they took care of that instance very quickly, kudos to that at least). Edit: Forgot to add TD Bank - I actually opened a case with the Office of the Comptroller of the Currency that regulates this bank. Companies that spammed me in the last 24 hours because they don'…

What email are you using that's so popular that dozens of people are (inadvertently?) entering it in all these businesses?

Are you "john.smith@gmail.com" or something like that?

I'm firstname@firstnamelastname.com, and I have had maybe a half dozen instances in the past decade.

Re: Not OK Cupid – A story of poor email address validation

#29

Companies that allowed others to create accounts with my email addresses: PayPal, Apple, Credit Karma, Walmart (I just forwarded the email to legal@ and they took care of that instance very quickly, kudos to that at least). Edit: Forgot to add TD Bank - I actually opened a case with the Office of the Comptroller of the Currency that regulates this bank. Companies that spammed me in the last 24 hours because they don'…

Someone signed up to Amazon with an email address of mine, and saved their credit card details.

I couldn’t get any attention from Amazon, and just got generic responses telling me I could reset my password, etc. In the end, I signed up to Amazon prime, I think to test some reassurance they had given me - I wasn’t expecting it to work.

The email saying I had just accidentally made a purchase with someone else’s credit card got Amazon’s attention. I think they also gave me a telling off, which I thought was ridiculous.

Not long after, someone else signed up to Spotify with my email address too. I think it was a child/shared account or something. I spent a while trying to improve their music taste, but I think we both were suffering from the clash of algorithms because they cancelled it soon after.

I haven’t had any people reverse-hacking themselves for a while now.

Re: Not OK Cupid – A story of poor email address validation

#30
post #21

Fastmail's masked emails are great! I honestly very rarely give out my "real" email. Usually when I sign up for something I create a masked email, or if I need an email on the spot I use a wildcard alias (xxxxxx@myalias.fastmail.com). Since most of my emails are random, it serves as an authentication additional factor.

Don’t de email domains get blacklisted or are they valid?

It's just fastmail.com, that would be insane to blacklist. Also you don't really use these for sending, it's more for signing up for things and online shopping.
Post reply on HN