Live data from Hacker News

Email IP Leak Test

emailleaktest.com

21–30 of 38 posts

Re: Email IP Leak Test

#22

My Thunderbird (v31) appears to leak my IP address ... or is it my Postfix server? anyway, it sounds bad regarding anonymity. Is it a configuration problem? my university lab email service has the same issue, so I guess it's a standard configuration ... ? (my mail server says it's Postfix who handled the mail, the one from the lab doesn't leak that)

It is the server by adding the "Received: from ..." header, not Thunderbird fault. It is indeed a standard configuration.

Re: Email IP Leak Test

#25
post #7

Guess it would be worth mentioning how to spoof initial Received header for those who self-host their email and run Postfix as their MSA/MTA: https://www.void.gr/kargig/blog/2013/11/24/anonymize-headers... Notice: This works when you have a separate MSA (submission) service listening on a separate port (587 by default), which is a proper approach; not when you send to MTA on port 25.

Not like I care about karma, but I see downvotes and I don't know what's wrong with my comment. That makes me curious.

I have a self-hosted email, my MUA machine's IP was logged in headers (and there's no particular reason for it to be there), so I googled for a bit, found a satisfying solution among others, and decided to share it. Is there anything wrong with that?

Re: Email IP Leak Test

#26
post #3

Looks like a great way to harvest active email addresses.

They'd be breaking the Privacy Policy if they were; http://emailleaktest.com/privacy.html

Far as I know, the binding nature of a site's privacy policy hasn't been conclusively determined - some courts have held it to be a binding contract, but others have held it to be a statement of company policy.

The only real consequence would seem to be loss of good will - but if their goal was to gather as many email addresses as possible in a short time, then that wouldn't really matter.

Re: Email IP Leak Test

#27
post #4

Another site to test email IP leaks: http://emailipleak.com/ Aside from basic IP leaks, you can also test for other privacy leaks at: https://emailprivacytester.com/ Featured in: http://www.ghacks.net/2014/05/25/test-email-account-privacy-...

The emailleaktest site linked by OP is a word for word down to the privacy policy blatant copy of http://emailipleak.com which we made. Not sure why this is hacker news front page worthy.

Wow, it sure is. The subject is HN worthy but I'd hope a moderator would edit the submission to point at your site instead.

And send GoDaddy a DMCA takedown notice for this copycat site. It was just registered a few days ago and given that they shamelessly ripped your content off, I'd have serious reservations about trusting them with my data.

Re: Email IP Leak Test

#28
post #7

Guess it would be worth mentioning how to spoof initial Received header for those who self-host their email and run Postfix as their MSA/MTA: https://www.void.gr/kargig/blog/2013/11/24/anonymize-headers... Notice: This works when you have a separate MSA (submission) service listening on a separate port (587 by default), which is a proper approach; not when you send to MTA on port 25.

Not like I care about karma, but I see downvotes and I don't know what's wrong with my comment. That makes me curious. I have a self-hosted email, my MUA machine's IP was logged in headers (and there's no particular reason for it to be there), so I googled for a bit, found a satisfying solution among others, and decided to share it. Is there anything wrong with that?

Nope. Maybe someone clicked the wrong button by accident. Or maybe they're just rude. I often find that many of the most interesting comments on this site are the most downvoted, so if I were you I'd take some pride in your downvote.

Re: Email IP Leak Test

#29
post #19

smart way to collect a huge list of valid email. This list is probably worth a bunch of $ .

For testing things like this using a throwaway address would appear to be the obvious choice.

That's not trivial with my current email provider, which is something I would like to test.

Re: Email IP Leak Test

#30
post #4

Another site to test email IP leaks: http://emailipleak.com/ Aside from basic IP leaks, you can also test for other privacy leaks at: https://emailprivacytester.com/ Featured in: http://www.ghacks.net/2014/05/25/test-email-account-privacy-...

The emailleaktest site linked by OP is a word for word down to the privacy policy blatant copy of http://emailipleak.com which we made. Not sure why this is hacker news front page worthy.

Not word for word! Unlike your website, the carbon copied site is extremely careful not to reveal anything about the people behind.
Post reply on HN