'I want your Instagram account': a deadly campaign over coveted handles
51–60 of 164 posts
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#52Re: 'I want your Instagram account': a deadly campaign over coveted handles
#53Earlier quoted context omitted.
That was nice of you, you probably could've kept the money and there isn't much they could've done. Ask me how I know :( PP money was not recoverable that one time my ex sent it to the wrong email address.
Paypal has a "reverse charge" button. You should be able to cancel any payment within a reasonable timeframe.
Thankfully it was only $500 bucks or so, not $45,000.
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#54I can't imagine these people are that untraceable. If they are dumb enough to reach out to the victims, finding them should be doable with a bit of luck.
I'm curious to see how laws and law enforcement around the world actually perceive this, especially considering the very different ways in which things like order bombing or swatting exist/don't exist in various countries.
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#55I remember getting a demand I surrender my HoTMaiL address to somebody in a very threatening email to my address way back in 1998. It was kind of surreal back then as the internet was still fresh. Nowadays the closest I've gotten to this is the people who keep using my Gmail address as their own email address. I find this behavior rather bizarre and don't know what it achieves.
> Nowadays the closest I've gotten to this is the people who keep using my Gmail address as their own email address. I find this behavior rather bizarre and don't know what it achieves. I have this problem also! I thought it was rare. In my case I think the person is very bad with computers and doesn't know what their email address is. I've gotten emails from their bank, cell phone, and even online dating. I tried ma…
It's not a super-common lastname, but there are probably several hundred people with it in the US.
I get all sorts of email for people whose address is some variant of it, like @gmail.com. I've gotten plane tickets, paypal payments, cancer diagnoses, Bar Mitzvah and Wedding invitations, college transcripts, all sorts of personal information.
In many cases, I don't think it's the fault of the person with the email; I think they give their email as "firstname.lastname@gmail.com" and some clerk just uses "lastname@gmail.com"
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#56Easy solution: Assign all accounts a unique and randomly generated ID, and allow everyone to then use the handle they want. If someone wants to write a @handle in a post or a comment, a list shall appear, asking them to choose the account they wish to link to. IDs shall be public, and the list shall present itself as something like "@Max 36hf28bcd ; @Max 9jv1tcsh ; @Max b63avg960"
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#57That fact, plus the stories in this article is making think of really closing off my social media visibility a lot more than it currently is.
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#58Earlier quoted context omitted.
could this be credential stuffing attempts? or just typos?
usually it is someone who has their email john.r.smith or similar and forgets they need the r There are other stories of people forgetting which company it was with (gmail vs yahoo) and even of google accidentally giving out emails with a period and then silently removing periods.
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#59I remember getting a demand I surrender my HoTMaiL address to somebody in a very threatening email to my address way back in 1998. It was kind of surreal back then as the internet was still fresh. Nowadays the closest I've gotten to this is the people who keep using my Gmail address as their own email address. I find this behavior rather bizarre and don't know what it achieves.
Likewise I have no fewer than three people trying to use a gmail address I've had since 2003 as their own. It's extremely frustrating - one even sent me $45,000 in a mistaken paypal transfer and then when I reversed the charges I was hit with an overdraft since I had made a Paypal purchase (which would ordinarily come from my direct bank funds) not knowing the money had been sent to me in error. It shouldn't be this…
>It shouldn't be this easy to use someone else's email address.
This though, seems hard. I don't think this is a "security" thing per se (though I dearly wish there was a modernized "email" system built with modern crypto from the ground up). But for any sort of communications at all it seems like there is an inherent tension between how low friction one wants for the world to communicate vs protection. Like, there is nothing stopping anyone from doing a pure whitelist system for email right now. I even do in fact do that for a few accounts like specific ones for client contacts, only active client addresses will be accepted everything else is blackholed. Those obviously receive zero spam or misuse of any kind [0]. But obviously the tradeoff for that is no new potential clients could ever "cold call" it either. One could imagine technical solutions like "only accept stranger email from accounts with a signed ID" or "vouched for by known address" (ie, WoT) or "only address with a signed time token >N from providers X, Y or Z", or some kind of challenge/response, but all would have privacy tradeoffs, complexity, and still wouldn't inherently do anything about honest mistakes.
We could have more powerful options for this, but it'd still involve subjective tradeoffs between how open to new communications one wants to be vs cutting down on noise. No one right answer there.
----
0: Forged from fields are of course possible but in practice someone would at the least have to know which handful of the total planetary email addresses were whitelisted, never mind flags that show up in the headers from that
Re: 'I want your Instagram account': a deadly campaign over coveted handles
#60I remember getting a demand I surrender my HoTMaiL address to somebody in a very threatening email to my address way back in 1998. It was kind of surreal back then as the internet was still fresh. Nowadays the closest I've gotten to this is the people who keep using my Gmail address as their own email address. I find this behavior rather bizarre and don't know what it achieves.
> Nowadays the closest I've gotten to this is the people who keep using my Gmail address as their own email address. I find this behavior rather bizarre and don't know what it achieves. I have this problem also! I thought it was rare. In my case I think the person is very bad with computers and doesn't know what their email address is. I've gotten emails from their bank, cell phone, and even online dating. I tried ma…
One day I decided to take action and sent a expletive filled email to them telling them that I was not the person they thought I was and to stop emailing me.
They then sent me an email telling me I was fired.