Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why was my email leaked?

forums.dropbox.com

Post reply on HN
Print view View original

91–100 of 265 posts

Re: Why was my email leaked?

#91

Post by greenmountin »

Mahn wrote: post #59
danielweber wrote: post #34

Earlier quoted context omitted.

The way some people do "fredsmith+amazon@gmail.com" as proof that it must be amazon that leaks their passwords has some issues. The guy who says that he had a truly random bunch of letters as his dropbox account is probably a better indicator, but it's hard to know if the guy ever leaked it himself. Doesn't excuse the moderators being jerks, though.

Speaking of which, this alias system from google is great in theory, but kind of pointless in practice; spammers can easily figure out they can just remove everything from the + sign, including the sign itself, and boom, they have my address without the specific alias.

That's true for a negative filter, but not a positive one; although, an email that required the subaddress might be less universal.

Re: Why was my email leaked?

#92

Post by nathanb »

Has anyone who created a Dropbox account AFTER July of 2012 noticed this spam increase?

If not, it may be that the compromised list of addresses from summer of last year has finally reached evil hands.

Re: Why was my email leaked?

#93

Post by doktrin »

benhalllondon wrote: post #36
kybernetyk wrote: post #7

Earlier quoted context omitted.

Yup, especially Chris' behaviour is a no go. I don't know how the mods are affiliated with dropbox but if they are employees I wouldn't let them have any customer contact at all.

Yeah, Chris seems a bit of prick: "Just the fact that you listed your emails says it all."

Especially considering the context. It seemed pretty clear that the user was posting the email address publicly for the first time.

That is just awful, and is an awkward example of why you may not want unpaid, mostly un-vetted volunteers as the public face of a company.

Re: Why was my email leaked?

#94

Post by kybernetyk »

saraid216 wrote: post #55
ditojim wrote: post #41

Earlier quoted context omitted.

why wouldn't you want your employees having contact with your customers?

GP means that, if these are employees, their capacity for dealing with customers is so low that it's a net negative for them to continue doing so.

Yes. That's what I meant. Sorry for my broken English.

Re: Why was my email leaked?

#95

Post by jey »

tokenadult wrote: post #84
danielweber wrote: post #34

Earlier quoted context omitted.

The way some people do "fredsmith+amazon@gmail.com" as proof that it must be amazon that leaks their passwords has some issues. The guy who says that he had a truly random bunch of letters as his dropbox account is probably a better indicator, but it's hard to know if the guy ever leaked it himself. Doesn't excuse the moderators being jerks, though.

When I try subaddressing as I try to sign up for new online services, more often than not that address format is rejected as invalid. Most online services don't have very good email validation.

Use a whole domain name, e.g. signup for dropbox with dropbox@tokenadult.com. You could do this with Google Apps Gmail by setting a catch-all forwarding address for the domain.

Re: Why was my email leaked?

#96

Post by signed0 »

saraid216 wrote: post #66
nwh wrote: post #40

Earlier quoted context omitted.

I recently had to sit through a customer rep read a 32 character long alphanumspecial email address out to me for "security reasons". Bet she was glad I didn't use usicode.

You might consider just picking one or two random words from the dictionary.

That sounds like a fun idea for an app/service. You provide it with your base email address or custom domain and it generates a couple random words and keeps track of what service you used it to sign up for.

Re: Why was my email leaked?

#97

Post by chmars »

pfranz wrote: post #88
jaibot wrote: post #78

Earlier quoted context omitted.

It's pointless in practice in theory; in practice in practice spammers (in my experience) don't target + aliases. And if you think about the set of people who are likely to give money to spammers, the set of people using + aliases, and the fraction of + alias space that is occupied versus the fraction of non-+'aliased space that is occupied, the reason why becomes clear.

I've tried to use this system in the past, but found it to be a PITA. A lot of email systems won't let you use a +. The other gotcha I get is that they use the email address as a login token (Dropbox, for example). So you have to remember a) that you used a token and b) what it was. Any suggestions on approaching these?

I use domaincom@mydomain.com, e.g., dropboxcom@mydomain.com.

Re: Why was my email leaked?

#98

Post by dimadima »

I'm all for busting some balls, especially if we're talking Dropbox. But shit like this happens all the time, and it's not like by busting some balls here we're going to improve the situation broadly speaking.

It's really absurd to expect that your information will actually be safeguarded by some entity that isn't you. As soon as you give any data to anyone, it's gone. You should pretty much assume it's public and get on with your life. Did ya'll catch that blog post up yesterday from the kid who deleted the USERS table at his job, because he was developing against a production database and running queries against it by hand? Experience has led me to believe that's the situation at like all things, everywhere, all the time. Ass clowns emailing around spreadsheets with user data; people getting malware installed on their Windows shit and entire infrastructure's data being compromised. It's a joke. Let's just always remember that while we're busting balls. But if you value your data, don't give it to anybody, ever.

Re: Why was my email leaked?

#99

Post by [deleted] »

tjbiddle wrote: post #44
inovica wrote: post #20

Earlier quoted context omitted.

Yeah thats exactly what happened :) No other way to contact them and the account manager I dealt with hasn't responded either. Just counted and I've sent them 6 emails so far and zero response. Its such as shame as I have raved over Dropbox (partly as its Python which I also love), have 4 Pro accounts with my team and we were looking to sign up with 15 users to a Teams account. Looks like I'll be moving somewhere els…

If you'd truly get a faster response being a Pro member, then it might be worth a shot to purchase Pro again - then when they respond, have them refund you and reset your account back to it's previous time left for your membership.

[deleted]

Re: Why was my email leaked?

#100

Post by claudius »

lawnchair_larry wrote: post #89

I have a unique email address for dropbox that has not received any spam. I created it a couple years ago but only used it once briefly.

I didn’t get any spam either, but then a short grep through my mail.log showed this:

  2013-02-28T18:05:18.865406+01:00 nfc postfix/smtpd[14995]: NOQUEUE: reject: RCPT from bl14-172-78.dsl.telepac.pt[85.247.172.78]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from= to= proto=ESMTP helo=
Post reply on HN