News for hackers. Stuff that matters.
Re:What kind of password reset scam is going on at Facebook? by yencabulator on Thursday September 07, 2023 @12:14PM (#37421206)
There's an idiot sharing my first & last name who never remembers to put his middle initial in his email address, and as a result I see he's an alcoholic, has financial trouble, keeps applying for artist grants, has a social sciences degree of some sort, is involved in local politics, and so on.

I could also choose to pwn his online betting, games, dating, and porn accounts any moment I want. I may or may not have changed his gender preferences on a dating site...

Re:What kind of password reset scam is going on at Facebook? by JohnMakin on Thursday September 07, 2023 @03:39PM (#37424492)
How? If his email is something like [email protected] and he's accidentally entering [email protected] (you), how is he ever able to register? If he's sending password reset requests to the wrong address (yours) - wouldn't every site in existence realize that's not the registered account and the email would never end up in your inbox?
Re:What kind of password reset scam is going on at Facebook? by yencabulator on Thursday September 07, 2023 @03:43PM (#37424544)
He has john.w.smith and is repeatedly typing in john.smith, and also hands it out to humans who then want to contact me about his things.

Apparently for many sites, user retention & money are more important than verifying an email address up front. He visits the scummiest betting and dating sites, so I'm not very surprised.

Re:What kind of password reset scam is going on at Facebook? by worthless-trash on Friday September 08, 2023 @02:32AM (#37430186)
I'm getting similar behavior from another user with the same pattern.

I also get their college results, government assistance, a payday loan company, pinterest and subscriptions to newsletters sent to me for them.

Ive mailed them directly, multiple times but they dont seem to care. I'm now returning the favor, signing them up for all the crappy sites when i need a throwaway.

Re:What kind of password reset scam is going on at Facebook? by Tagbert on Thursday September 07, 2023 @05:43PM (#37426024)
A surprisingly large number of sites will let you register without requiring an email verification.

I continually get a lot of emails, sometimes with private information to first [email protected] where people with my same name just use that without caring that it is not their email address. You probably aren't getting that job offer and you probably aren't getting that bank load approved without being able to see the emails.

For a while I tried to notify the senders but they rarely reacted or even provided a way to contact them. Now I worry about it becoming a scam vector so I just delete them.

Re:What kind of password reset scam is going on at Facebook? by michaelmrose on Thursday September 07, 2023 @08:10PM (#37427509)
Once you leave sites actually created by tech companies many sites don't actually verify that you own an address you just input anything you please that looks like a valid email. The extra step as it were isn't included in all online tutorials on "how to manage implement login".

To deepen the problem gmail actually ignores periods in email so even if [email protected] already exists its possible create accounts for both [email protected] and [email protected] because although google will absolutely treat those 3 as the same thing and route all messages to any of the above to our first fellow randombob.com treats those as 3 unique email addresses.

This was actually exploited by the fellows that robbed Washington states unemployment system during the pandemic applying for unemployment for folks that didn't need it including humiliatingly enough actual workers who worked for the washington state employment security division. To make their robbery more ergonomic multiple fraudulent accounts were set up with email addresses that differed only by periods. In this instance it only worked of course because they were indeed able to verify their email accounts.

In other instances for example myFico has weak protections on signing up. You can use ANYONE's email address to sign up but strong protections on actually accessing information. This means in effect if someone signs up as you as actually happened to my wife you will never be able to get them to stop spamming you with that persons personal information nor make the person stop giving out your email.

I wasted 15 minutes of my life trying to explain that the address given actually was my wife's email address. Bitched to their credit union/other institutions about the persons financial data being leaked, created a complaint with the FCC. YADA YADA nobody cares about properly implementing email verification or leaking people's financial information.

Re:What kind of password reset scam is going on at Facebook? by flir on Thursday September 07, 2023 @04:34PM (#37425177)
I've got one who keeps forgetting he's got numbers on the end of his email address. He's a sheriff in a southern state. Also an idiot.

What's doubly annoying is the US gov is pretty lax at things like unsubscribe links, so I keep getting notifications about his Medicare account that I can't unsubscribe from.

Re:What kind of password reset scam is going on at Facebook? by nitwit005 on Thursday September 07, 2023 @08:04PM (#37427452)
They exempted themselves from the spam rules.
Re:What kind of password reset scam is going on at Facebook? by justsomehnguy on Thursday September 07, 2023 @09:50PM (#37428286)
> so I keep getting notifications about his Medicare account that I can't unsubscribe from.

That's forwarding rules are for. Preferably to the email of some judge in his precinct.

Re:What kind of password reset scam is going on at Facebook? by radicalbyte on Friday September 08, 2023 @01:36AM (#37429780)
My wife has one of those, a rather stupid American who keeps using her gmail for things (and regularly tries to reset her password).
Re:What kind of password reset scam is going on at Facebook? by tetris11 on Friday September 08, 2023 @02:40AM (#37430255)
My friend gets one every month from a really ugly guy. Super illiterate, brings bendy-straws-to-bathrooms type, probably has grandkids.

(That's what we're doing here right? Bashing on the old and the tech-illiterate?)

Re:What kind of password reset scam is going on at Facebook? by nullindividual on Friday September 08, 2023 @01:05PM (#37436288)
The way your post is structured reads as if you have a stupid American wife (I can hear Vasily Borodin say this).