News for hackers. Stuff that matters.
Re:Yubico sent marketing email to address submitted for prod... by Cacti on Sunday May 13, 2018 @12:18PM (#17059656)
I registered my own domain and switched my email over to a service that lets me generate arbitrary email aliases. When I go to a site or have to otherwise give an email address, I create a new unique alias just for that service. This lets me track where they are leaking my email to, and lets me blackhole the whole site if needed.

It’s great.

Re:Yubico sent marketing email to address submitted for prod... by icey on Sunday May 13, 2018 @12:27PM (#17059697)
I've been doing a similar thing for year with the gmail feature that lets you add "+anything" to the end of your email address. If someone starts spamming [email protected], it's easy to create a filter to trash it automatically.

I've tried the catchall method on a domain I control, but got way too much spam people trying random addresses.

Re:Yubico sent marketing email to address submitted for prod... by zifnab06 on Sunday May 13, 2018 @01:47PM (#17060040)
I have [email protected]. My mail provider (fast mail) supports sending mail to [email protected]. This then ends up in a folder called service, or in my inbox.

Works pretty great.

Re:Yubico sent marketing email to address submitted for prod... by ceejayoz on Sunday May 13, 2018 @12:36PM (#17059749)
I'd imagine your average spam list purchaser removes the + stuff on Gmail addresses.
Re:Yubico sent marketing email to address submitted for prod... by x1798DE on Sunday May 13, 2018 @01:28PM (#17059960)
So blacklist everything coming in without a +
Re:Yubico sent marketing email to address submitted for prod... by ceejayoz on Sunday May 13, 2018 @01:44PM (#17060026)
Sure, if you never gave any friends/family the non-+ version.
Re:Yubico sent marketing email to address submitted for prod... by guitarbill on Sunday May 13, 2018 @02:15PM (#17060164)
And all websites accepted emails with "+" in them (hint: your email validation regex sucks and is not standard compliant).
Re:Yubico sent marketing email to address submitted for prod... by coldacid on Sunday May 13, 2018 @05:43PM (#17061197)
If a site has broken email validation and I absolutely positively NEED to use it, then I'll grudgingly create an explicit alias just for that site. Otherwise, I find a competitor that doesn't screw this up. In both cases, I end up passively-aggressively tweeting about the company's email validation, though.