Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Internet Archive: Security breach alert

theverge.com

Post reply on HN
Print view View original

281–290 of 648 posts

Re: Internet Archive: Security breach alert

#281

Post by xyst »

yonixw wrote: post #221
xyst wrote: post #214

One of the many benefits of owning my own email server: - I have a catch all setup to forward all emails to specific user on mail server - able to setup adhoc email addresses for each online service (ie, iarch@example.com) - able to claim example.com in haveibeenpwned Now I get breach emails from hibp for the whole domain. Unfortunately, I was exposed in this IA breach

Google workspace lets you do it if they mange emails for your domain (and it will cost ~5-10$/month if you are the only user) https://support.google.com/a/answer/12943537?hl=en

it “works”, but handing over this control to Google is a no-go for me.

Re: Internet Archive: Security breach alert

#282

Post by criddell »

lolinder wrote: post #274
halJordan wrote: post #259

Earlier quoted context omitted.

To be even easier, you can just have Apple or Google hold your domain and provide mail.

I'm not 100% sure that that gets you wildcard email addresses that all point to the same inbox, but if they support that, sure!

Not sure about Apple, but Google calls has that and calls it catch-all-routing.

Re: Internet Archive: Security breach alert

#283

Post by swatcoder »

halJordan wrote: post #259
lolinder wrote: post #239

Earlier quoted context omitted.

In case anyone would like these benefits but doesn't want to actually run an email server: All you actually need to accomplish this is a domain name and a decent provider. Fastmail is what I use and it's been great for me.

To be even easier, you can just have Apple or Google hold your domain and provide mail.

That's not easier, that's the same but with a worse scale fit.

If you need free, you need free.

But if you can pay, you want to pay a vendor whose scale is such that you mean something to them while still being mature enough to rely on.

This applies to pretty much everything, not just email.

With Google and Apple, you service needs are overhead and with Google in particular, your value is entirely in them being able to monitor as much as they legally can about your activity.

With Fastmail, Protonmail, etc, you are a customer already and they're invested in making you a bigger happy cuatomer in the future. They have staff that will service your support tickets, you represent profit on their books, and the services they offer you are generally designed for your scale more precisely.

Re: Internet Archive: Security breach alert

#284

Post by move-on-by »

lolinder wrote: post #274
halJordan wrote: post #259

Earlier quoted context omitted.

To be even easier, you can just have Apple or Google hold your domain and provide mail.

I'm not 100% sure that that gets you wildcard email addresses that all point to the same inbox, but if they support that, sure!

I don’t know about Google, but I know iCloud supports domain wildcarding

Re: Internet Archive: Security breach alert

#285

Post by xyst »

wackget wrote: post #246
xyst wrote: post #214

One of the many benefits of owning my own email server: - I have a catch all setup to forward all emails to specific user on mail server - able to setup adhoc email addresses for each online service (ie, iarch@example.com) - able to claim example.com in haveibeenpwned Now I get breach emails from hibp for the whole domain. Unfortunately, I was exposed in this IA breach

Great until you need to give someone an email address in real life and awkwardness ensues. Cashier: "What's your email?" Me: "walmart@somedomain.com" Cashier: "No I meant YOUR email address." Me: "Yeah walmart@somedomain.com" Cashier: "Oh do you work for Walmart???" Me: "No see I set up my email so... oh nevermind, 420BLAZEIT@GMAIL.COM"

Meh, it’s not that bad. I have a short domain and usually use an abbreviated version for user part. If it’s a big corp, just the stock ticker will suffice and nobody bats an eye. Some boomers raise an eye if it’s not @gmail.com or one of the big providers, but otherwise nobody cares.

But better than giving them an iCloud “hide my email” generated addy ;)

Re: Internet Archive: Security breach alert

#286

Post by r721 »

1024core wrote: post #245

Why should an Archive need accounts anyways? This is like a public library: you don't need to authenticate yourself to enter a public library, do you?

I created an account there because https://web.archive.org/save requires an account to set "Save outlinks" checkbox on.

Re: Internet Archive: Security breach alert

#287

Post by EricE »

lunatuna wrote: post #264
xyst wrote: post #214

One of the many benefits of owning my own email server: - I have a catch all setup to forward all emails to specific user on mail server - able to setup adhoc email addresses for each online service (ie, iarch@example.com) - able to claim example.com in haveibeenpwned Now I get breach emails from hibp for the whole domain. Unfortunately, I was exposed in this IA breach

I used to do this, now I use icloud and the 'hide my email' tool and it works without any hassle. Even asks me when signing up for something if I want to hide my email. It is easier than adding it to my old setup. Even easier than when I was using my free Google for Business setup. The rest of apple's email landscape sucks. It is pretty poor at managing spam, the client is terrible, it doesn't sync rules between the…

https://c-command.com/spamsieve/

Worth every penny.

Re: Internet Archive: Security breach alert

#288

Post by ks2048 »

alwayslikethis wrote: post #267
ks2048 wrote: post #265

Earlier quoted context omitted.

Interesting to compare their stated drive $/GB to their B2 offering: $6/TB/mo for "pay-as-you-go", hard-drive price: $0.014/GB B2 price (12*6/1024): $0.070/GB/year

Electricity, bandwidth, and generally running a business is not free. Also for these pay-as-you-go setups you'd need a considerable amount of free space available on demand. That said, it's not an especially cheap option. Hetzner has storage boxes for EUR 2.5/TB/mo (in fixed 5 and 10TB boxes though)

Yeah, I wasn't trying to point out that it's a bad price. I think it's pretty good: same price for two years with all the maintenance.

Re: Internet Archive: Security breach alert

#289

Post by [deleted] »

nightpool wrote: post #189
Aachen wrote: post #183

Earlier quoted context omitted.

> They still don't let you serve data to the network from a normal filesystem, you have to let their system ingest all of your stuff so you end up double-storing data or you have to give into everything being stored as inscrutable binary blobs. I don't understand this part. What data would you have to give them? Why can't it just live next to your stuff on your OS' filesystem?

They're saying that the client software (the servers that speak the IPFS protocols) has to load the files to be served into their own local storage database, it can't just keep a "metadata file" and read the existing files off disk. Presumably somebody could write a client that spoke the IPFS protocol and did this, or fork the main Go or JS one, but until someone does that they're stuck with the software that's alrea…

[deleted]

Re: Internet Archive: Security breach alert

#290

Post by fewgrehrehre »

PenguinRevolver wrote: post #213

Probably not the best time to say this, but it's surprisingly easy to go through a collection with items and grab every email along with the usernames. https://archive.org/metadata/naturally_a_girl/metadata One way or another, there was going to be someone who would take loads of emails with a username attached to it. A bit intrigued by how the hacker compromised the database and got the passwords.

Damn, I had no idea about this. Definitely would've changed some things had I known that emails were public.

This honestly seems like a bit of a design flaw.

Post reply on HN