News for hackers. Stuff that matters.
Re:Still locked out of my AWS account by drbawb on Friday July 07, 2017 @11:31AM (#14719143)
One trick I like is that you can use `account+<tag>@example.com` and a lot of services will consider it a separate e-mail address, even though MTAs will transfer it to the same account; this has the added benefit of being easy to filter for on your e-mail client. I also use this tactic when signing up for web services that I anticipate will spam me. (I import a lot of merch from China/Japan; their unsubscribe systems tend to be insanely broken / borderline user hostile. Each such account gets a unique tag so that I know which service is spamming me.)

Alternatively if you want ultimate trust just run your own mailserver and set up as many aliases as you want! For $5/mo you can get a Linode box to do it, and I've yet to get an IP from them that is on an e-mail blacklist. They have great documentation[1], the most important thing is to just make sure your SMTP server requires authentication & refuses to relay for remote hosts. SPF/DKIM are necessary to get past modern spam filters, but frankly if you've ever setup a TLS cert you can probably manage to setup DKIM just fine.

[1]: https://www.linode.com/docs/email/postfix/

Re:Still locked out of my AWS account by midispring on Friday July 07, 2017 @11:47AM (#14719311)
I used this trick for years. However, there are downsides.

For example, sometimes a service will let you sign up with this just fine, but later when you need to do something else (such as password reset) or a phone agent has to enter it... it chokes.

Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email. Being regimented about the naming system helps, but it's not foolproof.

I'm using this trick less and less nowadays and just entering my plain email to avoid these hassles... especially for things like real life accounts. For possibly shady characters and account email consolidation, still a great trick!

Re:Still locked out of my AWS account by simcop2387 on Friday July 07, 2017 @11:53AM (#14719365)
This is why I have my own domain. I have a catch-all email box that just accepts everything and can make up emails on the spot, [email protected]. It makes things a lot easier down the road if I have a problem with my current provider as I can change the MX records at will. This means though that my DNS service must be under another domain for safety though but that's less of an issue.
Re:Still locked out of my AWS account by GrinningFool on Friday July 07, 2017 @01:14PM (#14720088)
Do you have anything written about the components & configuration, by any chance?
Re:Still locked out of my AWS account by leipert on Friday July 07, 2017 @01:54PM (#14720487)
That is actually pretty easy.

1. register domain at a registrar that supports email catch all (I use namecheap, not affiliated)

2. setup email catch all (https://imgur.com/a/PTlzv) with redirect to your "real" email

3. write email to [email protected] -> get's redirected to your "real" email

This has the big advantage that you can change your real email account (I switched away from GMail two years ago) quite easily, you can track who leaks your address and filter more easily. But be prepared to leave some people stunned, I registered at my electricity provider with [email protected] or at my hairdresser with [email protected]

Re:Still locked out of my AWS account by GrinningFool on Monday July 17, 2017 @02:46PM (#14791266)
Thanks! (Belated)
Re:Still locked out of my AWS account by simcop2387 on Saturday July 08, 2017 @10:24AM (#14725504)
In my case I'm using an old grandfathered free google apps setup. So I don't have anything to really setup/configure myself. I know it's possible to do it with postfix and other mailing agents.

https://www.cyberciti.biz/faq/howto-setup-postfix-catch-all-...

Re:Still locked out of my AWS account by __david__ on Friday July 07, 2017 @01:14PM (#14720093)
Yes, this is the reason I know that the + character is %2b in a url. I've had to manually type it on so many crappy unsubscribe links (they don't realize + needs to be escaped because the web server they are using is doing the old-school + => space translation).

The nice thing about running my own email server is I configured it to use . and _ as well as +. [email protected] and [email protected] are pretty much guaranteed to work, and it ends up exactly the same as the +.

Re:Still locked out of my AWS account by GordonS on Friday July 07, 2017 @12:53PM (#14719907)
> Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email

A password manager solves this problem

Re:Still locked out of my AWS account by midispring on Friday July 07, 2017 @01:38PM (#14720342)
I knew someone would say this. lol If you're away from your computer and haven't installed the password manager to your phone (I'm not nearly alone in this), then you may need to fall back to searching your emails. Better?

Anyway, this doesn't solve the other technical problems you may hit at some point using this trick.

I'm just giving people a heads up. It's a useful tool for certain things, but it can be overused.

Re:Still locked out of my AWS account by djsumdog on Friday July 07, 2017 @02:00PM (#14720528)
I would recommend not using Linode and realize your e-mail will be terribly unreliable if you run your own e-mail server (even if you setup DKIM, SPF and DMARC. Google/Microsoft don't give a shit about any of that). I wrote a post about this a while back:

http://penguindreams.org/blog/how-google-and-microsoft-made-...

I've considered moving to Vultr since they block SMTP/25 by default and individual customers have to get it enabled (which seems like it should reduce false positive spam classification as more e-mail providers).

Re:Still locked out of my AWS account by giancarlostoro on Friday July 07, 2017 @11:34AM (#14719164)
I was just about to comment with this suggestion. A friend of mine uses it for gmail and its great for filtering as you suggested.