Instead of deleting account, NYT appends ‘1000’ to username and email address

Re:Instead of deleting account, NYT appends ‘1000’ to userna... by berkes on Wednesday April 29, 2020 @02:19AM (#23016010)

I once received an automated email to '[email protected]'. Where example.com is my domain. I employ catchall, so that I can generate a new mail for each service. I contacted them and they apologised. The CTO personally explained that this was legacy they lost track of and thanked me for pointing out.

You catch a lot, with catchall: dataleaks, hacks, sneaky data sales etc. When suddenly you recieve, say, marketing mail for shirts on '[email protected]' something fishy is going down.

[ Parent | on HN ]

Re:Instead of deleting account, NYT appends ‘1000’ to userna... by HenryBemis on Wednesday April 29, 2020 @03:01AM (#23016246)

I have been doing the same since 2001, the amount of crap the net catches is unfathomable. Apparently there is a company somewhere on this planet with the same name as my last name "bemis.com" while my domain is "bemis.net" and I sometimes get invoices, CVs, PowerPoint presentations, emails from their external auditors.. I am waiting for the day they will ask me to buy my domain (which I use long before their company was created)(oh and it is my last name.. so good luck with that).

Having done enough security audits, "this was legacy" is a BS excuse. I will go ahead and assume that NYT have an audit department. And that audit dept runs throug the full audit universe every 4-5 years. Someone would have captured that a long time ago (1st, 2nd, 3rd lines)(external auditors)(any sales pitch: "we have 438264728 subscribers")

I call BS. They got busted and now they most likely change this from 1000 to 2000 and call it a day..

Ps: bemis is not my real last name.. but I am using a super cool name over here!!

[ Parent | on HN ]