News for hackers. Stuff that matters.

A comment on Mailgun Security Incident and Important Customer Information.

Re:Mailgun Security Incident and Important Customer Information by ad_hominem on Friday January 05, 2018 @01:52PM (#16080649)
When I get spam email, I usually check the headers and if it's coming from a reputable service (Postmark, Sendgrid, etc.) they usually have a web form or an abuse@ email to send the headers to so that they can shut down the account.

Months ago I received spam from a Mailgun server and tried to use their web form[1] to report it, but it was broken. I reported both that bug and the spam email to their support, which acknowledged it. Weeks later I got another spam email from that same domain, popped open that report form and it was still broken (FWIW as of today it seems to be working again). So I followed up on my initial support request with that info but got no response. Just a few days ago I received another spam message from that domain.

I personally consider all that a very bad sign in an email service provider and wouldn't use Mailgun myself. In contrast, I've been very happy with Postmark.

[1]: https://www.mailgun.com/receiving-spam-from-mailgun

[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by clon on Friday January 05, 2018 @02:21PM (#16080888)
Postmark is really nice indeed, even though a bit on the pricey side.

Still, I can recommend their free tool to monitor DMARC: https://dmarc.postmarkapp.com/

[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by pbowyer on Friday January 05, 2018 @05:30PM (#16082336)
> I've been very happy with Postmark.

Postmark's service is great but their new min $10/month pricing scheme is a retrograde step and penalises small companies sending less than 1000 emails a month.

Deeply unhappy with the change, and wish more companies would follow the Amazon AWS pricing model.

[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by ad_hominem on Saturday January 06, 2018 @12:29AM (#16084005)
I didn't realize the new monthly plans were required for new accounts - that's unfortunate. I'm still on the old credits system (grandfathered I guess).
[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by aceoflala on Friday January 05, 2018 @01:53PM (#16080659)
Postmark costs money, Mailgun does not.
[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by ad_hominem on Friday January 05, 2018 @02:02PM (#16080736)
Postmark is free up to 100 mails / month. But mail deliverability issues are a hell that I'm happy to pay a small fee to avoid.
[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by eikenberry on Friday January 05, 2018 @03:23PM (#16081350)
Do they have an overage charge for the free 100/month, like the 1.25/1000 they list for their non-free use? So you could be free most of the time with the occasional 1.25 charge if you have a busy month?
[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by ad_hominem on Saturday January 06, 2018 @12:26AM (#16083998)
Unfortunately I don't think so. :(

> We offer a Free Trial plan for testing purposes only. The Trial is limited to 100 emails a month with no overages allowed.

https://postmarkapp.com/support/article/1107-how-does-monthl...

[ Parent | on HN ]
Re:Mailgun Security Incident and Important Customer Information by ams6110 on Friday January 05, 2018 @08:35PM (#16083299)
The free tier of Mailgun has significant delivery problems because those servers have a poor spam reputation.
[ Parent | on HN ]