Live data from Hacker News

Why was my email leaked?

forums.dropbox.com

251–260 of 265 posts

Re: Why was my email leaked?

#251
post #141

Earlier quoted context omitted.

> So what's causing this to happen? 4. You're leaking your own email addresses. Start by looking for malware on every device you touch.

I can guarantee you that none of my devices contain malware. Like I said, a trojan Android app could be a possibility but seems unlikely.

If you have the ability to guarantee that any device is malware free, you could make a lot of money in the security industry, as no one else in the world has such a power.

Re: Why was my email leaked?

#252

Earlier quoted context omitted.

I still think you missed my point. The only way in which you could have been deceived is if you went into the discussion assuming no conflict of interest. Years of dealing with financial media and experts has rendered me incredibly cynical, so I focused on the author's claims (which, in this case, are true -- If the product acts as the website claims, the self-hosted solutions store credentials on your servers and no…

You've made the mistake of finding a rule that works in a particular environment and trying to apply it in all situations. The HN community is nothing like the financial industry. Applying that level of cynicism to all aspects of life is likely to have a damaging effect to both you and the communities we live in.

"The HN community is nothing like the financial industry."

Oh how I wish that were the case, but there's a really strong mapping from HN and SV to finance (too much to mention in a reply, but I may try to flesh it out in a blog post one day)

Re: Why was my email leaked?

#253
post #178

Earlier quoted context omitted.

There are several reasons you could be getting spam that aren't related to Dropbox. Without knowing your address, it's possible that the spammers randomly guessed it. Another possibility is that a friend's email or Facebook account was compromised, exposing your email address. (I get a disturbing amount of spam this way.) The cases described in the Dropbox forum are more convincing because the addresses were used onl…

It fascinates me how desperate folks are to excuse Dropbox. I wonder why - is it because they're a startup?

No, not because they are a start up, but because it's really damn easy for $random_internet_user to get compromised and not realize it.

Did $random-user share his dropbox email with someone else who was compromised?

Did $random-user save his dropbox email on a large service (like Yahoo), which he had compromised?

Did $random-user not update Java, Adobe, Windows, etc and have his machine compromised? Or in some other way leak information?

I'm not in any way excusing Db, but uncritically blaming them without other possible scenarios seems just as asinine.

Re: Why was my email leaked?

#254

Earlier quoted context omitted.

tl;dr: read http://hastebin.com/raw/gefuxumubu "your affiliation is quite relevant. When you are talking about something when you have a clear conflict of interest, you need to disclose it. Then at least the reader has the right context in which to make a decision." I used to think the way you do. Then I entered the financial world. At this point, I've seen so many people talk up their positions without disclosing th…

I've never seen someone use tldr; to send someone to a different link :) My response is that it is all about context and community norms. Here, on HN, the norm is that if you're going to bash someone, and you work for a competitor, you disclose that. If you can't pass that small ethical hurdle, there are other companies I can send my money to. (Not to mention, That I consider it uncouth to bash a competitor like that…

Just out of curiosity, where was he (minm) bashing his competition?

This is a totally honest question as I looked when you wrote this and found no bashing.

Re: Why was my email leaked?

#255

Earlier quoted context omitted.

That's why they are volunteers.

Wait, what? Volunteering in general or even open source or community software projects makes plenty of sense, but why the hell would anyone volunteer for a private for-profit like Dropbox? Is it some kind of internship scam?

Some customers really like the product and don't mind helping out other users on forums for free. Happens all over the place on forums of all types.

Re: Why was my email leaked?

#256
post #253
post #178

Earlier quoted context omitted.

It fascinates me how desperate folks are to excuse Dropbox. I wonder why - is it because they're a startup?

No, not because they are a start up, but because it's really damn easy for $random_internet_user to get compromised and not realize it. Did $random-user share his dropbox email with someone else who was compromised? Did $random-user save his dropbox email on a large service (like Yahoo), which he had compromised? Did $random-user not update Java, Adobe, Windows, etc and have his machine compromised? Or in some other…

> I'm not in any way excusing Db, but uncritically blaming them without other possible scenarios seems just as asinine.

Except you're wrong here - they've admitted they leaked all these unique email addresses, and it isn't actually some cataclysmic combination of coincidences that all these users were compromised. As would otherwise need to be the case.

Re: Why was my email leaked?

#257
post #64

Earlier quoted context omitted.

Google Drive, SpiderOak, SugarSync, Skydrive, Amazon Cloud Drive, Box.net.

There is no Google Drive linux client yet =/. What about the others? I use Dropbox on Windows, Linux, Mac, Android and I have even used it on a personal server. I have not seen anything that can replace it.

Insync works great as a Linux client/integration for Google Drive: https://www.insynchq.com/linux

Re: Why was my email leaked?

#258

This dropbox forum is exploding. Fascinating to watch. As an aside, who knew so many people had "dropbox only" email accounts. One guy with 10 random letters/numbers he uses only for dropbox. Wow. Is this a thing?

While the +unique@domain trick is easily avoided by spammers (strip the +unique), an alternative (and likely what the user with the 10digit random email is using) is to use a personal domain name for a single user's email.

The mailserver is configured to push @mydomain.com to a catch-all mailbox, and the unique TO: lines make for exceptionally flexible filtering/easy identification when a company "loses" your email address.

While this is a thing, it's probably only common amongst folks who carry scars from years of adminning mailservers :)

Re: Why was my email leaked?

#259

Earlier quoted context omitted.

Yes, your affiliation is quite relevant. When you are talking about something when you have a clear conflict of interest, you need to disclose it. Then at least the reader has the right context in which to make a decision. When you post w/o disclosing, you make it seem like someone from this community has found your product interesting and is suggesting others try it. Instead of working for a company and trying to dr…

tl;dr: read http://hastebin.com/raw/gefuxumubu "your affiliation is quite relevant. When you are talking about something when you have a clear conflict of interest, you need to disclose it. Then at least the reader has the right context in which to make a decision." I used to think the way you do. Then I entered the financial world. At this point, I've seen so many people talk up their positions without disclosing th…

Then something really strange happened: I stopped caring about the affiliations and really focused on the veracity of their statements.

But it's not just how truthful the statement is, it also covers "why am I considering this statement at all?".

And the answer "because someone I trust has had the same problem, considered the available options, and recommends X" is very different to "because someone who works for X says use X".

Re: Why was my email leaked?

#260

Earlier quoted context omitted.

I've never seen someone use tldr; to send someone to a different link :) My response is that it is all about context and community norms. Here, on HN, the norm is that if you're going to bash someone, and you work for a competitor, you disclose that. If you can't pass that small ethical hurdle, there are other companies I can send my money to. (Not to mention, That I consider it uncouth to bash a competitor like that…

Just out of curiosity, where was he (minm) bashing his competition? This is a totally honest question as I looked when you wrote this and found no bashing.

> You are no different from the dropbox forum moderators

That was the line I was referring to...

Post reply on HN