News for hackers. Stuff that matters.

A comment on Firefox Monitor. Parent comment

Re:Firefox Monitor by Xylakant on Wednesday June 05, 2019 @02:52PM (#20107899)
I usually go for <company>@example.com where <company> is the company I’m handing my address to. After a breach I route that address to /dev/null
[ Parent | on HN ]
Re:Firefox Monitor by bradknowles on Wednesday June 05, 2019 @07:12PM (#20110044)
That's trivially easy to guess -- and game.

You want something that is sufficiently random that it can't be easily guessed or gamed, but can be quickly and easily determined on your side.

Salted cryptographic hashes might be a good place to start.

[ Parent | on HN ]
Re:Firefox Monitor by username444 on Wednesday June 05, 2019 @10:39PM (#20111124)
Most spammers won't go through the of "gaming" it. There's no upside. There are far easier targets to focus on than sending more mail to a single recipient who is more sophisticated.
[ Parent | on HN ]
Re:Firefox Monitor by erichurkman on Wednesday June 05, 2019 @04:14PM (#20108649)
After a breach of <company>@example.com, forward it to support@<company.com>.
[ Parent | on HN ]
Re:Firefox Monitor by Xylakant on Wednesday June 05, 2019 @04:16PM (#20108674)
Don’t give me ideas.
[ Parent | on HN ]