News for hackers. Stuff that matters.

A comment on Show HN: Easy-to-use curl command to send email notifications.

Re:Show HN: Easy-to-use curl command to send email notificat... by guessmyname on Wednesday November 21, 2018 @02:59PM (#18505539)
It seems that I can unsubscribe everyone like this:

    curl "https://www.curlmail.co/unsubscribe/EMAIL"
This may or may not be considered as an attack vector. If I know that someone is using the service, I can “troll” them by unsubscribing their email and they will stop receiving the alerts. A solution to this would be to include a verification code in the “unsubscribe” link that you are sending with the alert. Unsubscribe only if the verification code exists and matches the one associated with the email.
[ Parent | on HN ]
Re:Show HN: Easy-to-use curl command to send email notificat... by mrmattyboy on Wednesday November 21, 2018 @03:06PM (#18505599)
It's funny you should mention that... I made a commit a couple of months ago that I never released: 6e898a9db280 matthew Add tokens to un-subsribe Sep 18 2018, 2:09 PM

Rolled out, so should be fixed :)

[ Parent | on HN ]