Disqus Security Alert: User Info Breach

Re:Disqus Security Alert: User Info Breach by edp on Saturday October 07, 2017 @03:13AM (#15422683)

For some websites, you can put a "+" sign and whatever you want after your gmail username. For example: [email protected], and you will receive mails at [email protected]. Unfortunelately, this doesn't work with websites that have aggressive regexp checking on email fields.

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by j7ake on Saturday October 07, 2017 @03:42AM (#15422769)

I don't see the benefit of using [email protected] if the point is to obscure your email address

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by zeristor on Saturday October 07, 2017 @06:38AM (#15423227)

Not everyone realises that'+' is a valid character in an email address, at least not when I tried this several years ago.

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by edp on Saturday October 07, 2017 @04:48AM (#15422953)

If you don't want bots to try email+password from a leak on a bunch of websites, it's good enough, but I agree on the fact that it won't hide your identity.

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by cm2187 on Saturday October 07, 2017 @03:14AM (#15422688)

Plus it leaks your underlying email address so it offers very limited protection. Also you can't delete the alias to stop any future spam/phishing.

[ Parent | on HN ]

Re:Disqus Security Alert: User Info Breach by Too on Saturday October 07, 2017 @03:55AM (#15422821)

I think with gmail it's possible to filter based on which alias it was sent to.

[ Parent | on HN ]