Live data from Hacker News

Receiveee.com - disposable email address

receiveee.com

51–60 of 127 posts

Re: Receiveee.com - disposable email address

#51
post #49
post #45

Earlier quoted context omitted.

Note that @mailinator.com email addresses are blocked at a significant number of sites due to its popularity. Throwaway email sites that alternate between several different domains work best.

Mailinator has a ton of different domains. You can check them all from mailinator.com though.

You can even donate a domain or have your own "private" mailinator domain by simply pointing the MX record for a domain or subdomain you control to their server.

Re: Receiveee.com - disposable email address

#52

Earlier quoted context omitted.

That's not your mailaddress in the URL. It's like a password to access the inbox later :)

Hmm... But why should the 'password' URL be so similar to the mail address. Doesn't this mean that if I know your mail address, I can fairly easily guess the secret URL to let me see that inbox? (Granted that in the most common use case, if I know the email address, I probably know what's in the inbox, since I am likely the person who sent the message. But still, why not make these 2 different random strings?) A coup…

Yeah, the developer is going to want to fix that quick smart. At a complete guess they are two strings being generated in quick succession from the same seed, and they both happen to be very close. End result is that I can guess your email.

Re: Receiveee.com - disposable email address

#53
post #50

Earlier quoted context omitted.

Regarding your last point: possibly technical ignorance on my part, but is there some reason signing up for, say, a gmail account doesn't suffice?

A gmail account is tied to your identity, an absolute pain to sign up for, and requires your mobile number.

They don't require mobile numbers, and setting up a throwaway gmail takes about a minute, not tied to your identity at all. You don't even have to click and activation link, if you pass the CAPTCHA.

That being said, they certainly have IP logs, so make sure to enable Tor.

Re: Receiveee.com - disposable email address

#54

My favorite disposable email provider, by far, is 33mail.com, mainly because the addresses don't have to be disposable. You give a different email address to each service, and, if you get spam, you know the culprit and can block them right away. Brilliant.

Yahoo! Mail has such a feature, which I use and love. They do call it "disposable addresses", because you dump them when they start bringing spam.

Re: Receiveee.com - disposable email address

#55
post #51
post #49

Earlier quoted context omitted.

Mailinator has a ton of different domains. You can check them all from mailinator.com though.

You can even donate a domain or have your own "private" mailinator domain by simply pointing the MX record for a domain or subdomain you control to their server.

I've always wondered why a site that blocks mailinator sites wouldn't just do an MX lookup on any domain you put in and check for mailinator redirects.

Re: Receiveee.com - disposable email address

#56
post #55
post #51

Earlier quoted context omitted.

You can even donate a domain or have your own "private" mailinator domain by simply pointing the MX record for a domain or subdomain you control to their server.

I've always wondered why a site that blocks mailinator sites wouldn't just do an MX lookup on any domain you put in and check for mailinator redirects.

Probably because it's harder than /@mailinator.com$/i. And the determined will always succeed anyway, so why go to great lengths?

Re: Receiveee.com - disposable email address

#57
post #31

Earlier quoted context omitted.

You are being naive -- it really depends on the service. For trivial online services, a disposable email might be fine, but for anything that costs money, you're doing your users a disservice by letting them register with an email address that they won't be checking (and which could potentially get hijacked, if someone knew the address).

If a service prevents me from signing up with whatever email address I want, I won't be using it. It's one thing to discourage weak passwords, as that's a common mistake for people that don't know any better. It's another thing altogether to deny signing up with something like this, as they clearly will know the ramifications of doing so.

I have a website that gives freebies (=$$$) to new signups, so allowing throwaway accounts makes people do things like sign up for 100 accounts.

Not giving freebies is of course an option, but then there is goodwill lost on that end instead.

It sucks both ways. At least I don't spam my users, but they of course only trust that assertion so far and I certainly don't blame them - there seems to have been a significant rise in email marketing in the last 6+ months - probably some annoying YC startup or two making it much too easy for sites I signed up for at some point but really don't want to hear from send me email... Tsk, tsk ;)

Re: Receiveee.com - disposable email address

#60

I used my free time during Christmas and pushed a huge update to my latest weekend hack. It's a disposable email address service. Some of the main features are: * SSL only connections * All data is stored in memory using redis to make the site blazing fast * New mails are instantly displayed using web sockets * Automatically clicking on common activation links * Your inbox doesn't expire

You should append the PositiveSSL CA 2 intermediate certificate to your certificate file. That comodo cert isn't in a few browsers'/systems' certificate stores yet.

https://www.ssllabs.com/ssltest/analyze.html?d=receiveee.com

Your nginx configuration ssl ciphersuite list includes single DES, too, when it shouldn't.

Post reply on HN