41–50 of 72 posts
On a related note, how safe is it to do a Google search of your password?
Earlier quoted context omitted.
How many mail clients load those by default nowadays? Gmail doesn't, Thunderbird doesn't.
Um, Gmail does: https://support.google.com/mail/answer/145919?hl=en > Gmail automatically shows you the images in your messages It does have an option to turn it off, but the default is on. They will load up the image themselves, then serve it from their domain, but, as the help information shows, that still indicates an "open", it's just that all the information on who opened the email (IP address, etc) would be wro…
One source: http://arstechnica.com/information-technology/2013/12/gmail-...
EDIT: I get what you're saying. I guess the count would depend on how long Google caches that image- or do they load it on a per email basis?
Earlier quoted context omitted.
Um, Gmail does: https://support.google.com/mail/answer/145919?hl=en > Gmail automatically shows you the images in your messages It does have an option to turn it off, but the default is on. They will load up the image themselves, then serve it from their domain, but, as the help information shows, that still indicates an "open", it's just that all the information on who opened the email (IP address, etc) would be wro…
I believe gmail is caching these images on their own servers. One source: http://arstechnica.com/information-technology/2013/12/gmail-... EDIT: I get what you're saying. I guess the count would depend on how long Google caches that image- or do they load it on a per email basis?
Nice work! At a glance, the email you sent out does look sort of spammy. If you plan on doing it again you might get better feedback by making it a bit more human - ie "I'm just a guy/gal trying to help yall out - hope you don't use this password everywhere because someone posted it to pastebin.... - have a good one!" or something like that. Out of curiosity - what did you use to scrape pastebin?
I created a Twitter bot called @dumpmon (recently suspended for no apparent reason) that scraped paste sites looking for password dumps and tweeting if one was found. You can find the code here: http://github.com/jordan-wright/dumpmon . Here are some stats if anyone is interested in what it collected over approx. 2 years: http://jordan-wright.com/blog/2015/05/26/two-years-of-at-dum...
Glad to see dumpmon is still going strong :)
Nice work! At a glance, the email you sent out does look sort of spammy. If you plan on doing it again you might get better feedback by making it a bit more human - ie "I'm just a guy/gal trying to help yall out - hope you don't use this password everywhere because someone posted it to pastebin.... - have a good one!" or something like that. Out of curiosity - what did you use to scrape pastebin?
Took much inspiration from dumpmon, but distributed it so users can choose their own sensitivity settings.
Earlier quoted context omitted.
Sending unsolicited automated emails, even for good, may be considered rude as well.
Really? Do people seriously have this notion? Yes, sending actual spam is rude. But an unsolicited automated email can easily be deleted, especially if it's one time. I would never associate "rude" with that, maybe "annoying" at worst.
Unsolicited automated email = Spam.
Unsolicited semi-automated (i.e. fill in the blanks) email = Spam.
Unsolicited personal email actually written by a human = OK.
Followup to unsolicited email because I didn't reply to the first one = Very rude. Instant blacklist of sender.
Earlier quoted context omitted.
Is there any reliable way to do this? Most mail clients will block receipt-type stuff by default...
I believe the trick is to put a hidden, 1px image in the email. Then you can track how many times it was requested.
This is a cute experiment, but unfortunately the integrity of the service is is easily corrupted. The biggest problem is being prone to misinformation. There's nothing to prevent people from posting arbitrary e-mail lists to pastebin, with purported matching passwords, as an effort to provoke your service to cry wolf. A few suggestions to harden the service: - provide integrity when sending the message by including a…
Your password is: xttp://someporn.site.the/spammer_wants_you_to_visit
Earlier quoted context omitted.
I created a Twitter bot called @dumpmon (recently suspended for no apparent reason) that scraped paste sites looking for password dumps and tweeting if one was found. You can find the code here: http://github.com/jordan-wright/dumpmon . Here are some stats if anyone is interested in what it collected over approx. 2 years: http://jordan-wright.com/blog/2015/05/26/two-years-of-at-dum...
I remember chatting with you a while back as I was also working on a pastebin scraping project. http://github.com/shayanjm/pasteye Glad to see dumpmon is still going strong :)