News for hackers. Stuff that matters.
Re:Still locked out of my AWS account by sillysaurus3 on Friday July 07, 2017 @11:16AM (#14718963)
Doesn't this require separate gmail addresses? If so, then that's an extremely bad idea. I already had one gmail account completely banned with no notice. I wasn't doing anything abusive -- I used it for some npm projects and a github account.

Actually, is there a reasonable free gmail alternative for situations like this? I'd like to migrate. FastMail is worth paying for, but it's too expensive for one-off side projects. And while I don't trust gmail, I think I trust most services even less.

EDIT: My point was, if you use a single account, it's far less likely to get banned. I think my account was caught in some sort of automated purge, since I certainly wasn't abusing anything. Some proof: http://i.imgur.com/H5RRkyP.png I'm not sure which policy violation they're referring to, but all appeals failed. I lost all emails in that account, which thankfully wasn't very serious because the account was still young.

eropple and drbawb pointed out that you can use plus addresses with AWS, e.g. [email protected].

Re:Still locked out of my AWS account by drbawb on Friday July 07, 2017 @11:31AM (#14719143)
One trick I like is that you can use `account+<tag>@example.com` and a lot of services will consider it a separate e-mail address, even though MTAs will transfer it to the same account; this has the added benefit of being easy to filter for on your e-mail client. I also use this tactic when signing up for web services that I anticipate will spam me. (I import a lot of merch from China/Japan; their unsubscribe systems tend to be insanely broken / borderline user hostile. Each such account gets a unique tag so that I know which service is spamming me.)

Alternatively if you want ultimate trust just run your own mailserver and set up as many aliases as you want! For $5/mo you can get a Linode box to do it, and I've yet to get an IP from them that is on an e-mail blacklist. They have great documentation[1], the most important thing is to just make sure your SMTP server requires authentication & refuses to relay for remote hosts. SPF/DKIM are necessary to get past modern spam filters, but frankly if you've ever setup a TLS cert you can probably manage to setup DKIM just fine.

[1]: https://www.linode.com/docs/email/postfix/

Re:Still locked out of my AWS account by midispring on Friday July 07, 2017 @11:47AM (#14719311)
I used this trick for years. However, there are downsides.

For example, sometimes a service will let you sign up with this just fine, but later when you need to do something else (such as password reset) or a phone agent has to enter it... it chokes.

Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email. Being regimented about the naming system helps, but it's not foolproof.

I'm using this trick less and less nowadays and just entering my plain email to avoid these hassles... especially for things like real life accounts. For possibly shady characters and account email consolidation, still a great trick!

Re:Still locked out of my AWS account by simcop2387 on Friday July 07, 2017 @11:53AM (#14719365)
This is why I have my own domain. I have a catch-all email box that just accepts everything and can make up emails on the spot, [email protected]. It makes things a lot easier down the road if I have a problem with my current provider as I can change the MX records at will. This means though that my DNS service must be under another domain for safety though but that's less of an issue.
Re:Still locked out of my AWS account by GrinningFool on Friday July 07, 2017 @01:14PM (#14720088)
Do you have anything written about the components & configuration, by any chance?
Re:Still locked out of my AWS account by leipert on Friday July 07, 2017 @01:54PM (#14720487)
That is actually pretty easy.

1. register domain at a registrar that supports email catch all (I use namecheap, not affiliated)

2. setup email catch all (https://imgur.com/a/PTlzv) with redirect to your "real" email

3. write email to [email protected] -> get's redirected to your "real" email

This has the big advantage that you can change your real email account (I switched away from GMail two years ago) quite easily, you can track who leaks your address and filter more easily. But be prepared to leave some people stunned, I registered at my electricity provider with [email protected] or at my hairdresser with [email protected]

Re:Still locked out of my AWS account by GrinningFool on Monday July 17, 2017 @02:46PM (#14791266)
Thanks! (Belated)
Re:Still locked out of my AWS account by simcop2387 on Saturday July 08, 2017 @10:24AM (#14725504)
In my case I'm using an old grandfathered free google apps setup. So I don't have anything to really setup/configure myself. I know it's possible to do it with postfix and other mailing agents.

https://www.cyberciti.biz/faq/howto-setup-postfix-catch-all-...

Re:Still locked out of my AWS account by __david__ on Friday July 07, 2017 @01:14PM (#14720093)
Yes, this is the reason I know that the + character is %2b in a url. I've had to manually type it on so many crappy unsubscribe links (they don't realize + needs to be escaped because the web server they are using is doing the old-school + => space translation).

The nice thing about running my own email server is I configured it to use . and _ as well as +. [email protected] and [email protected] are pretty much guaranteed to work, and it ends up exactly the same as the +.

Re:Still locked out of my AWS account by GordonS on Friday July 07, 2017 @12:53PM (#14719907)
> Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email

A password manager solves this problem

Re:Still locked out of my AWS account by midispring on Friday July 07, 2017 @01:38PM (#14720342)
I knew someone would say this. lol If you're away from your computer and haven't installed the password manager to your phone (I'm not nearly alone in this), then you may need to fall back to searching your emails. Better?

Anyway, this doesn't solve the other technical problems you may hit at some point using this trick.

I'm just giving people a heads up. It's a useful tool for certain things, but it can be overused.

Re:Still locked out of my AWS account by djsumdog on Friday July 07, 2017 @02:00PM (#14720528)
I would recommend not using Linode and realize your e-mail will be terribly unreliable if you run your own e-mail server (even if you setup DKIM, SPF and DMARC. Google/Microsoft don't give a shit about any of that). I wrote a post about this a while back:

http://penguindreams.org/blog/how-google-and-microsoft-made-...

I've considered moving to Vultr since they block SMTP/25 by default and individual customers have to get it enabled (which seems like it should reduce false positive spam classification as more e-mail providers).

Re:Still locked out of my AWS account by giancarlostoro on Friday July 07, 2017 @11:34AM (#14719164)
I was just about to comment with this suggestion. A friend of mine uses it for gmail and its great for filtering as you suggested.
Re:Still locked out of my AWS account by wvenable on Friday July 07, 2017 @11:21AM (#14719016)
Sometimes I feel like I'm last person on the planet who has their own domain and hosts their own email.
Re:Still locked out of my AWS account by jimktrains2 on Friday July 07, 2017 @11:26AM (#14719092)
I don't host my own email (I've had terrible experiences trying to send), I do have my own domain and let someone else host my email (In this case Google :( but since it's my domain I can change it and it doesn't matter to anyone).

Aside: It always frustrates me when I see a business with their own domain and then an @gmail.com or @aol.com address. What registrars don't offer basic email forwarding (often for free?) or cheap (~$10 email) service you can buy from them if you can't figure out Google for your Domain)?

I feel like there is a small, but profitable space here, I just can't figure out what to do to harness it.

Re:Still locked out of my AWS account by godot on Friday July 07, 2017 @01:11PM (#14720059)
Zoho is pretty much free for personal uses. They charge per user per month, but under 25 users is free, and if you're not a business you don't have that many users.

I have numerous personal projects that are web sites/web apps and I use Zoho to get emails at all those domains.

I don't know if this is frowned upon by Zoho, but if you don't want to use their UI, you can set up your regular personal Gmail account to act as a POP3 client and just retrieves emails from Zoho that way. (now that I wrote it out, it makes me think it can't be frowned upon, simply because POP3 is even offered as a feature there)

Re:Still locked out of my AWS account by problems on Friday July 07, 2017 @11:36AM (#14719177)
I'm still doing this one too - took maybe an hour to configure a simple dovecot+postfix+spamassassin setup and I don't have to touch it beyond an upgrade once every 6 months or so.

Having catchalls at bullshit domains is great.

Re:Still locked out of my AWS account by BenjiWiebe on Friday July 07, 2017 @11:53AM (#14719369)
You aren't the only one. I host mine on linode and have no problems sending now that I have DKIM and SPF set up.
Re:Still locked out of my AWS account by willow9886 on Friday July 07, 2017 @11:26AM (#14719082)
I feel like my company is the last to not use Google and Salesforce... There are a million reasons why Google could lock you out of an account... If I lose my personal email, I will survive. I can't in good faith accept that type of liability for my business communications though.
Re:Still locked out of my AWS account by dlb_ on Friday July 07, 2017 @11:33AM (#14719159)
You're certainly not the only person, I do the same. These stories that keep popping up, about people losing access to their SSO accounts and emails convinced me that it's worth the effort.
Re:Still locked out of my AWS account by jtbayly on Friday July 07, 2017 @11:28AM (#14719102)
You are.

I was like 10th from the last. :)

Re:Still locked out of my AWS account by aquadrop on Friday July 07, 2017 @11:49AM (#14719332)
> My point was, if you use a single account, it's far less likely to get banned

Why do you think that? If anything, you have more activity you can be banned for...

And also, why you say it like gmail is the only email provider? You need separate _email_ accounts, not gmail. It can be some other service or your own domain. Google can be service provider behind your own domain, but you will control address space etc. Nobody will ban you out of your own email address (except domain registrar, but that's unlikely).

Re:Still locked out of my AWS account by sillysaurus3 on Friday July 07, 2017 @11:53AM (#14719360)
It seems like Google uses some heuristics when deciding whether to ban an account. My theory is that if you stick with your personal gmail account, you have such a long history of activity that it's unlikely to be flagged by whatever "smart" algorithm they're using.

I was quite surprised that my gmail account was banned without doing anything remotely malicious. (Certainly not anything listed in https://www.google.com/intl/en-US/%2B/policy/content.html) I suppose it's my word against Google's, which isn't a happy position to be in, but to the best of my knowledge that's what happened.

Regarding other services, I was hoping to get some recommendations about which one everyone likes using. Gmail and FastMail seem to be the two HN favorites, but FastMail gets expensive quickly for side projects. You can host your own email, but people have shared some unpleasant experiences with that route. It's true that you can still use gmail without losing your address, but you'll still lose your emails if they decide to suspend you.

Re:Still locked out of my AWS account by aquadrop on Friday July 07, 2017 @12:15PM (#14719569)
> It seems like Google uses some heuristics when deciding whether to ban an account. My theory is that if you stick with your personal gmail account, you have such a long history of activity that it's unlikely to be flagged by whatever "smart" algorithm they're using.

I never saw/heard of evidence of such behavior.

> but you'll still lose your emails if they decide to suspend you

Emails are easily backupable, you can download them locally and/or forward everything to the "backup" email. One more service to host email on your own domain is Yandex.Mail, it's free and pretty good.

Re:Still locked out of my AWS account by FRex on Friday July 07, 2017 @05:23PM (#14722233)
Do keep in mind that Yandex falls under Russian federal law. There was an incident already with FSB getting data about backers of Navalny's anti-corruption website from Yandex Money and if you are vocal on LGBT laws you can easily run afoul of federal children protection law (to protect children from abuse, shocking materials, LGBT, anti-family values, etc.) like the founder of Deti-404 (LGBT support group that even the author of children protection law defended, ironically enough) did.

I'm personally considering hushmail (Canadian) or some other paid email in the future, for maximum piece of mind, any double digit number seems reasonable enough annually. Some out of the way liberal first world country , no superpower (and superspy) aspirations, a small paid provider (that actually needs customers and word of mouth and not throwing their weight around, Google is notorious for deleting YT channels willy nilly for 'guidelines violation' and then restoring them after a shit storm) to ensure no 'smart' 'ML' algorithm bans you. Sounds just about right.

Re:Still locked out of my AWS account by eropple on Friday July 07, 2017 @11:17AM (#14718975)
You can use plus addresses for multiple AWS accounts. They're fine with that.
Re:Still locked out of my AWS account by sillysaurus3 on Friday July 07, 2017 @11:17AM (#14718983)
Cool, thanks!
Re:Still locked out of my AWS account by eropple on Friday July 07, 2017 @11:21AM (#14719017)
No problem. Fair warning--you'll want to be pretty proactive about going in and killing all their marketing emails, because each and every account gets all of them.
Re:Still locked out of my AWS account by sbov on Friday July 07, 2017 @12:30PM (#14719696)
I use fastmail to host my own domain. I alias all users to myself. Any email I get to aliases that don't end in e.g. ".s" automatically goes to a filtered folder. So [email protected] goes to my inbox, [email protected] gets filtered. $5/month is cheap. I only use one domain, but presumably you could even host multiple domains using a similar setup.
Re:Still locked out of my AWS account by iddqd on Friday July 07, 2017 @11:23AM (#14719042)
AWS requires a different email address per account yes. I don't see how it's bad? In your case, if you lost access to one gmail account with a dozen AWS accounts attached to it, that would affect all your AWS accounts? Better to have them fully separated so they can't affect each other.
Re:Still locked out of my AWS account by stordoff on Friday July 07, 2017 @11:43AM (#14719257)
> Doesn't this require separate gmail addresses?

It probably should, but I somehow ended up with two Amazon accounts (retail, not AWS) with the same email address. Changing the password I use changes which account I log in to.

Presumably it's a bug, but it's certainly confusing.

Re:Still locked out of my AWS account by tetha on Friday July 07, 2017 @11:49AM (#14719333)
I recently managed to do that as well. This becomes very interesting if you try to recover a password, because apparently the password recovery only recovers the last account.

Eventually I got out of that by changing the mail of whatever account I could log into, using gmails feature of ignoring everything between the first + and an @ in the address. But most annoying, now my aws login is something silly like [email protected].

Maybe I could change that back, but I'm too scared to touch that.

Re:Still locked out of my AWS account by FireBeyond on Friday July 07, 2017 @12:13PM (#14719553)
> FastMail is worth paying for, but it's too expensive for one-off side projects.

FastMail will let you create multiple aliases, either at your own domain, or one of theirs, linked to your account.

Re:Still locked out of my AWS account by Spooky23 on Friday July 07, 2017 @11:24AM (#14719066)
Find a webhost or DNS registrar that will do autoforwarding. I have a personal domain with a bunch of emails for specific things.
Re:Still locked out of my AWS account by astrostl on Saturday July 08, 2017 @04:50PM (#14727143)
AWS accounts require separate email addresses, which may OR MAY NOT happen to be provided by Gmail.
Re:Still locked out of my AWS account by mistermumble on Friday July 07, 2017 @11:38AM (#14719201)
I have had a half-dozen gmail accounts over the past 10 years and all are active with no problem.
Re:Still locked out of my AWS account by pmlnr on Friday July 07, 2017 @11:50AM (#14719334)
Use aliases. It possible even in gmail. Or host your mailing and use aliases.
Re:Still locked out of my AWS account by tjoff on Friday July 07, 2017 @11:17AM (#14718980)
Multiple gmail addresses is not a bad idea, but a highly supported and recommended setup.
Re:Still locked out of my AWS account by sillysaurus3 on Friday July 07, 2017 @11:18AM (#14718989)
Mine was banned with no notice after weeks of work. So I'm just putting this out there as a warning that gmail can crush you at any time with no recourse.
Re:Still locked out of my AWS account by tjoff on Friday July 07, 2017 @11:18AM (#14718997)
Of course they can - but that is yet another reason to rather rely on multiple gmail accounts if the alternative is a single gmail account.
Re:Still locked out of my AWS account by sillysaurus3 on Friday July 07, 2017 @11:20AM (#14719010)
If you use a single gmail account, it seems far less likely to get banned. I think I was caught in some sort of automatic purge, since I certainly wasn't abusing anything or using it for much beyond my side projects.

This email hostage situation kind of sucks. Hopefully there's an alternative for scenarios like this.

Someone mentioned self-hosting upthread. I wonder how difficult that is.

Re:Still locked out of my AWS account by mintplant on Friday July 07, 2017 @11:30AM (#14719134)
I have numerous Gmail accounts (more than 20) and not a single one has been banned. And Google explicitly supports using multiple accounts by providing an account switcher. Perhaps your account was banned for some reason other than being a duplicate.
Re:Still locked out of my AWS account by sillysaurus3 on Friday July 07, 2017 @11:36AM (#14719185)
Maybe so, but they won't tell me why it was banned. That alone should give people pause. There were a lot of resources tied to that account.

Here's the closest thing to a list of reasons I could find: https://www.google.com/intl/en-US/%2B/policy/content.html

I didn't engage in illegal activities, malicious or deceptive practices, hate speech, harassment, distributing personal information, child exploitation, spam, ranking manipulation, distribution of sexually explicit material, violence, selling regulated goods and services, impersonation, account hijacking, or use multiple accounts to bypass the above policies. So I have no idea what I did -- Google won't say, and all attempts to get more info out of them failed.