News for hackers. Stuff that matters.

A comment on Tell HN: AngelList told my employer that I'd updated my profile.

Re:Tell HN: AngelList told my employer that I'd updated my p... by dwightgunning on Monday March 21, 2016 @04:34AM (#11326813)
When you say "pretending to be me" do you mean that they spoofed your email address in the from and/or reply-to fields?

[edit: typo]

[ Parent | on HN ]
Re:Tell HN: AngelList told my employer that I'd updated my p... by solve on Monday March 21, 2016 @07:06AM (#11327275)
Yes, the FROM spoofs your name so that the person will believe it's being sent directly from you in most email clients, and the Reply-to goes directly to your email. These are the email headers:

    From: YOUR_NAME <[email protected]>
    
    Reply-To: YOUR_NAME <[email protected]>
[ Parent | on HN ]
Re:Tell HN: AngelList told my employer that I'd updated my p... by oliversisson on Monday March 21, 2016 @02:31PM (#11330506)
They used my name in the email from and reply-to fields, and to sign my name. I've replied to my original post with the actual email.
[ Parent | on HN ]
Re:Tell HN: AngelList told my employer that I'd updated my p... by dwightgunning on Monday March 21, 2016 @06:51PM (#11332841)
Thanks, that spells it out. Damn, that is fairly messed up.

I had a similar experience with F6S sending emails in my name so I know how uncomfortable it feels.

This is a shame and hopefully just a one-off error.

[ Parent | on HN ]
Re:Tell HN: AngelList told my employer that I'd updated my p... by dwightgunning on Monday March 21, 2016 @06:53AM (#11327235)
Downvotes? Just looking for some clarification on what actually happened here. It's not exactly clear.
[ Parent | on HN ]
Re:Tell HN: AngelList told my employer that I'd updated my p... by jonesb6 on Monday March 21, 2016 @07:08AM (#11327284)
People probably read too much into your comment, hence the down votes. Reason would dictate from the very small amount of info provided that AngelList merely made the email out to look like it was from OP. To say they spoofed them email headers would've gotten 3x the number of up-votes.
[ Parent | on HN ]