News for hackers. Stuff that matters.

A comment on Ask HN: Google Doc email virus?. Parent comment

Re:Ask HN: Google Doc email virus? by mailinatorguy on Wednesday May 03, 2017 @06:02PM (#14260590)
It's my guess that Mailinator is extremely irrelevant to their plan.

They planned to propagate via BCC but they needed a "To:" address - preferably one that didn't bounce.

So they hit the "h" key awhile, then added @mailinator.com

[ Parent | on HN ]
Re:Ask HN: Google Doc email virus? by meowface on Wednesday May 03, 2017 @11:21PM (#14262175)
Would it have made a difference if they made the "To:" a non-existent address? Would a bounce also prevent delivery to BCC recipients?
[ Parent | on HN ]
Re:Ask HN: Google Doc email virus? by AstralStorm on Thursday May 04, 2017 @03:33AM (#14263193)
Technically, they have to defeat greylisting and server validity checks anyway to get mails accepted to most modern mail servers.
[ Parent | on HN ]
Re:Ask HN: Google Doc email virus? by fastest963 on Wednesday May 03, 2017 @10:45PM (#14262032)
Why didn't they just send the email to the recipient? What does the BCC add in this context?
[ Parent | on HN ]
Re:Ask HN: Google Doc email virus? by thehappy on Wednesday May 03, 2017 @10:55PM (#14262074)
BCC recipients can't see (or contact) each other to mitigate the spread. If you look at the source code, it BCCs 99 contacts from the infected account per message.
[ Parent | on HN ]