Hacker News new | ask | show | jobs
by SwaroopH 4622 days ago
A point about spoofed email, Square always seems to ask the sender for a confirmation whether the email was spoofed or not. I tested this by sending it legitimately and through an unauthorized email server.

The only thing that was concerning was when I sent a spoofed email, the receiver was able to know the sender name (cash account name) – "ABC is about to send you cash". Very minor but it allows anyone to find out your name provided they know your email address.