News for hackers. Stuff that matters.
Re:Has LinkedIn lost control of its user email database? by ColinWright on Thursday September 25, 2014 @09:53AM (#8367103)
The email to which I'm receiving viruses and spam is not of that form.

Edit: To those who are downvoting - the comment to which I'm replying says:

    > Or a tool that just generates random
    > mail addresses ending with a popular
    > e-mail provider domain.
Firstly, the address does not end with the domain of a popular e-mail provider, hence the email address to which I'm receiving these unwanted emails is not of that form. Thus my reply is true, and informative.

It's also neither a random user at the domain, nor a dictionary element, nor a simple variant on a dictionary element, nor short, nor public (until now), nor falls into any of the formats I see and deduce from the dictionary attacks on the servers I run. And it is long, and has internal structure. Thus is is, again, not of the form being described in my comment.

So thank you for the down-votes, but I feel that my comment is true, relevant, and justified.

Re:Has LinkedIn lost control of its user email database? by vidarh on Thursday September 25, 2014 @10:15AM (#8367243)
Have you ever replied to a message sent to you from someone via LinkedIn? If so, it's easy to end up sharing your e-mail address with that someone, and good chance that someone has leaked the address on somewhere - whether by copying into a contact manager in their e-mail and being compromised, or letting some site or other log in to their Linked In account.
Re:Has LinkedIn lost control of its user email database? by ColinWright on Thursday September 25, 2014 @10:24AM (#8367296)

  >>> Or a tool that just generates random
  >>> mail addresses ending with a popular
  >>> e-mail provider domain.

  >> The email to which I'm receiving viruses
  >> and spam is not of that form.

  > Have you ever replied to a message sent to
  > you from someone via LinkedIn? If so, it's
  > easy to end up sharing your e-mail address
  > with that someone ...
While what you say is true, it's a non-sequitur. It's possible that I have replied to someone, and it's possible that they leaked it, but that has nothing to do with classic dictionary attacks, and the fact that such is unlikely to have succeeded with the address that's been leaked.

Perhaps you intended to reply to a different comment.

Edit: To those who are down-voting this - thank you for the reality check. I don't understand why you think my comment is of negative value, but it reminds me that not everyone thinks the same way.

Re:Has LinkedIn lost control of its user email database? by vidarh on Friday September 26, 2014 @01:37AM (#8371497)
I said nothing about dictionary attacks. It's not a non-sequitur at all, the point was to offer another, alternative suggestion to how it might have happened.

And while I didn't downvote you, if I'd seen a reply like this to someone else, I might very well have done so rather than bother to reply, seeing as you've quoted three paragraphs just to dismiss a valid suggestion because you for some reason don't think it fits in this location in the thread.

Re:Has LinkedIn lost control of its user email database? by ColinWright on Friday September 26, 2014 @02:47PM (#8374189)

  > I said nothing about dictionary attacks.
Indeed, and given that this particular exchange was talking about dictionary attacks, that is why I thought your comment was a non-sequitur. It didn't seem to follow naturally from the comments above, and seemed out of place, which is why I wondered if you really had intended to reply there.

  > It's not a non-sequitur at all, the point was
  > to offer another, alternative suggestion to how
  > it might have happened.
That was being done in other comments elsewhere. Again, that's why I thought your comment seemed misplaced in this particular branch, albeit absolutely correct.

  > And while I didn't downvote you, ...
I know that - you can't downvote a reply to one of your comments.

  > ... if I'd seen a reply like this to someone
  > else, I might very well have done so rather
  > than bother to reply, seeing as you've quoted
  > three paragraphs just to dismiss a valid
  > suggestion because you for some reason don't
  > think it fits in this location in the thread.
I didn't quote those comments to dismiss your contribution. Indeed, I said "... what you say is true ...". My quoting was to try to point out why I was wondering about the placement of your comment.

So to re-iterate, I didn't dismiss your comment, I just thought it would be better placed where others were already making the same or similar points. I'm sorry I didn't make myself clearer, and apologise.

Thank you for taking the time to explain.

Re:Has LinkedIn lost control of its user email database? by pessimizer on Thursday September 25, 2014 @11:36AM (#8367670)
I can't understand the thought process behind the downvoting either. I'm assuming that some people aren't reading carefully, but just downvoting any negative tone (like these mild denials) on general principle.
Re:Has LinkedIn lost control of its user email database? by spindritf on Thursday September 25, 2014 @11:36AM (#8367671)
Downvotes on HN have been approaching random lately. It doesn't mean anything.
Re:Has LinkedIn lost control of its user email database? by jaebrown on Thursday September 25, 2014 @10:47AM (#8367442)
Have you ever applied to a job and wanted the email to be different than the one who have listed?