News for hackers. Stuff that matters.
Re:Mozilla's Firefox Relay to be added to disposable-email-d... by johnklos on Sunday January 16, 2022 @03:08PM (#29959448)
This is not outside of the realm of possible. Google does nothing to stop spammers, makes up their own non-public rules and doesn't communicate with the Internet community, so Gmail addresses are already on shaky grounds.

For instance, for starters, go search through all of your email for any email sent from Google servers where the "Reply to:" doesn't match the "Mail from:", and tell me if there are any legitimate instances. We could all benefit by starting to reject all Google sourced email with a different "Reply to:".

What we really need is a blocklist / allowlist system which tracks the millions of Gmail email addresses. Has it never been seen before? Reject it with a message telling them to go sign up for the allowlist. Has it been around for a while? Allow it.

Google can't be asked to keep their own spam in check. We have to force it on them.

Re:Mozilla's Firefox Relay to be added to disposable-email-d... by AnonC on Sunday January 16, 2022 @03:25PM (#29959607)
> johnklos 8 minutes ago | parent | next [–]

This is not outside of the realm of possible. Google does nothing to stop spammers, makes up their own non-public rules and doesn't communicate with the Internet community, so Gmail addresses are already on shaky grounds. For instance, for starters, go search through all of your email for any email sent from Google servers where the "Reply to:" doesn't match the "Mail from:", and tell me if there are any legitimate instances.

Why is this scenario a red flag in all instances? Mailing lists, including Google Groups, may have settings that set the Reply To to be different from the Mail From.

Re:Mozilla's Firefox Relay to be added to disposable-email-d... by Avamander on Sunday January 16, 2022 @03:53PM (#29959907)
> For instance, for starters, go search through all of your email for any email sent from Google servers where the "Reply to:" doesn't match the "Mail from:", and tell me if there are any legitimate instances. We could all benefit by starting to reject all Google sourced email with a different "Reply to:".

Yes. Very common. Sorry but you have a very limited view of realistic mail traffic.

Re:Mozilla's Firefox Relay to be added to disposable-email-d... by schleck8 on Sunday January 16, 2022 @03:28PM (#29959625)
It's really difficult creating a fake google account nowadays
Re:Mozilla's Firefox Relay to be added to disposable-email-d... by 0xC0ncord on Sunday January 16, 2022 @03:32PM (#29959677)
As someone who gets spam from various Gmail accounts on the daily I'm not inclined to believe it's that difficult.
Re:Mozilla's Firefox Relay to be added to disposable-email-d... by Nextgrid on Sunday January 16, 2022 @04:37PM (#29960391)
It's only difficult for those who want to commit the atrocious crime of having privacy.

Lesser evil criminals such as spammers already have a supply chain of phone numbers, residential IP addresses, etc that can be used to work around the restrictions.

Re:Mozilla's Firefox Relay to be added to disposable-email-d... by iqanq on Sunday January 16, 2022 @04:40PM (#29960421)
I've created several ones over the course of months without any issue. I wasn't even asked for a phone number.

Of course if you do it constantly or from third-world IP addresses, I understand they refuse your attempts.