News for hackers. Stuff that matters.
Re:Sendgrid under siege from hacked accounts by TylerE on Saturday August 29, 2020 @07:56PM (#24320256)
To be honest, at this point I wish email would just die and get replaced with an actual modern protocol. It's a nightmare. Everything about it sucks.
Re:Sendgrid under siege from hacked accounts by samat on Saturday August 29, 2020 @08:12PM (#24320327)
Please don't. Anything modern would another lock-in. I can read decade old emails, switched multiple providers. Messages in those 'new protocols' are long unaccessible and protocols themselves are dead.
Re:Sendgrid under siege from hacked accounts by Spivak on Saturday August 29, 2020 @10:52PM (#24320992)
At this point at least pay for delivery would give you some path to actually get to users.
Re:Sendgrid under siege from hacked accounts by zelly on Sunday August 30, 2020 @12:57AM (#24321470)
Spammers would pay too, maybe even outbid the genuine users. They already invest a lot into getting past filters.
Re:Sendgrid under siege from hacked accounts by smabie on Saturday August 29, 2020 @09:24PM (#24320598)
Such as? How would it work?
Re:Sendgrid under siege from hacked accounts by TylerE on Saturday August 29, 2020 @09:48PM (#24320690)
Not having trivially forged headers would be a start.
Re:Sendgrid under siege from hacked accounts by Spivak on Saturday August 29, 2020 @10:54PM (#24321000)
Isn’t this basically what SPF, DKIM and SMTP over TLS get you? Sure you can try to forge messages but they should bounce immediately and not even reach the recipients inbox.
Re:Sendgrid under siege from hacked accounts by techdragon on Saturday August 29, 2020 @11:08PM (#24321054)
I’m not an expert... but From what I can tell no one trusts anyone’s email anymore and even as we added these new security things.. we didn’t start trusting any more than we did before... Consequences being that even with the extra security, trying to run your own mail server and get email recipients to receive the mail you send is like being some kind of extremely polite red team, on the offensive in the worlds longest least organised capture the flag.