News for hackers. Stuff that matters.

A comment on Gmail password first character is case insensitive on mobile device. Parent comment

Re:Gmail password first character is case insensitive on mob... by caymanjim on Saturday October 09, 2021 @01:28PM (#28811634)
They might do the same stupid thing Gmail does, and ignore certain characters. My Gmail is "[email protected]", but I constantly get mail from idiots who don't know their own email address, and use my "[email protected]" to sign up for things. This problem would go away entirely if Gmail didn't do this. Facebook might do similar things to make it "easier" to login, even though there are security implications.
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by dado3212 on Saturday October 09, 2021 @01:57PM (#28811853)
That’s by design though, the .‘s are optional. You can add more even. Also plus routing: [email protected] also routes to the same email.
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by lostlogin on Saturday October 09, 2021 @02:23PM (#28812006)
Well, I’ve learned something, thanks.

“ Gmail doesn't recognize periods as characters in addresses -- we just ignore them. For example, you could tell people your address was [email protected], [email protected] or [email protected]. (We understand that there has been some confusion about this in the past, but to settle it once and for all, you can indeed receive mail at all the variations with dots.)”

https://gmail.googleblog.com/2008/03/2-hidden-ways-to-get-mo...

[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by alex-korr on Saturday October 09, 2021 @10:12PM (#28815190)
Yep. I use it to identify which site has been selling my info to the 3rd party marketers.
[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by scbrg on Saturday October 09, 2021 @05:06PM (#28813301)
> This problem would go away entirely if Gmail didn't do this

No it wouldn't. The problem is that people believe they have addresses they don't. They don't have [email protected] any more than they have [email protected].

I have a surname@ address, and I receive similar mails all the time. People just simply assume they have my email address. No dots involved.

https://xkcd.com/1279/

[ Parent | on HN ]
Re:Gmail password first character is case insensitive on mob... by caymanjim on Monday October 11, 2021 @12:07PM (#28829856)
It would go away for me because no one ever uses the real first.m.last address; all the misdirected mail is from people who think firstmlast is their email address.
[ Parent | on HN ]