Hacker News new | ask | show | jobs
by saberworks 3407 days ago
Probably more evil than the practice described in the article is at the very end. In order to get them to stop, or not start in the first place, you have to give them your email address. So you have to trust them with the very thing you want them to stop abusing. No thanks. The real answer is a very strict ad blocker. On all your devices. Every time you browse.

The only way to keep your personal information safe is to not share it in the first place. Pass all the laws you want and require all the layers of security you can imagine but your data is still not safe; it will eventually get leaked. Either through the actions of hackers, intentional or unintentional leaks, security bugs, or utter incompetence of some human that has legal access to it.

1 comments

> So you have to trust them with the very thing you want them to stop abusing.

"Fun" fact: I register on sites with addresses like "address-suffix@domain", with a different suffix for different sites. I won't name names, but I now receive viagra-level spam to several of them, which reasonable people would expect to be able to trust. haveibeenpwned.com confirms that one of them, off the top of my head, was part of a breach.

Why not name names? Let's name and shame companies that are either selling your info or hiding breaches.
So in my inbox currently:

* dbox@mydomain.com (Dropbox) - first received spam two years ago.

* (Greenheart Games/Game Dev Tycoon) - highest quatity of spam after contact/info/admin

Although I just checked and the Greenheart Games address is in a mod's package.json so probably not their fault

I got spam to a email registered with Microsoft.

A company I worked for got its email list leaked when the email service they used was breached. The email service posted a "we're investigating" in a blog post on a blog that was soon mysteriously deprecated/taken down.

Microsoft sells the shit out of your email address. If you sign up for Dev Essentials you can't even opt out of emails from "partners" unless you leave the Dev Essentials program (and I'm sure leaving it wouldn't actually stop the emails). The only spam I get at my work email (with spam filtering turned off) is tied to that program.
I wonder if this is a case for a side project.

A website showing which sign ups put you at risk, by exploiting a similar email naming convention.

So everyone ends up on level pegging.

I have a catchall mailbox on my personal domain, and always sign up with unique email addresses for everything.