Ubiquiti Networks Breach

Re:Ubiquiti Networks Breach by bacondude3 on Monday January 11, 2021 @03:37PM (#25736316)

PSA: with Mailchimp URLs, it's best to remove the `?e=xxx` URL parameter. That way, A) you can't be identified by the sender as the person who shared the email, and B) other people can't flood your inbox by clicking the "unsubscribe" link at the bottom of the email.

In this case, the cleaned URL that should have been posted is https://mailchi.mp/ubnt/account-notification

[ Parent | on HN ]

Re:Ubiquiti Networks Breach by sundvor on Monday January 11, 2021 @10:11PM (#25741774)

Good call! This just keeps getting better, sharing the URL is such a natural thing to do but of course they need to add the tracking parameters to everything.

[ Parent | on HN ]

Re:Ubiquiti Networks Breach by berkes on Tuesday January 12, 2021 @02:54AM (#25743658)

In this case it's both tracking and a legitimate feature: being able to place unsubscribe links in the "web version".

I'd argue that this feature is not worth the privacy invasion, but for it to work, you do need a secret in the URL that is always personal.

[ Parent | on HN ]

Re:Ubiquiti Networks Breach by sundvor on Friday January 15, 2021 @05:36AM (#25789207)

They could easily have left the unsubscribe in the email, and linked to a UID of the mass mailout text instead for the web view.

[ Parent | on HN ]

Re:Ubiquiti Networks Breach by DavideNL on Tuesday January 12, 2021 @09:03AM (#25746986)

The ClearUrls Firefox extension often prevents this...: https://gitlab.com/KevinRoebert/ClearUrls

[ Parent | on HN ]