News for hackers. Stuff that matters.
Re:Ask HN: Have you ever been contacted to sell your user's ... by siliconc0w on Sunday July 05, 2015 @11:04PM (#9836495)
I've never been contacted but here is a #lifehack if you use gmail sign up with youremail+domain to track who is selling your info.
Re:Ask HN: Have you ever been contacted to sell your user's ... by scintill76 on Monday July 06, 2015 @01:50AM (#9837028)
Yeah, if you ignore the corollary #shadybusinesshack, which is to strip + suffixes from @gmail.com addresses, or any other domain with gmail MX records.

Slightly more advanced trick is exploiting the fact that Gmail ignores . in addresses, so that [email protected], firstlast, fi.rst.la.st, firstlast.., are almost infinitely unique encodings of the same mailbox. But again, smart spammers can just remove all dots so that the spammee can't tell who sold the address.

Re:Ask HN: Have you ever been contacted to sell your user's ... by Gustomaximus on Monday July 06, 2015 @12:39AM (#9836817)
In a similar vein, I keep a domain set up with an open mail address for anything at that domain. I sign-up with the format of the domain and date as my email prefix.

Surprisingly I've only seen one misuse of email address doing this for a few years. And I sign-up to competition and the usual suspects quite regularly. The bigger one I find abused these days is phone numbers. I guess it's harder to track source hence more dodgy brothers activity here.

Re:Ask HN: Have you ever been contacted to sell your user's ... by coryl on Sunday July 05, 2015 @11:07PM (#9836510)
Could a smart marketer simply query the list for all emails with "+" and truncate from there?
Re:Ask HN: Have you ever been contacted to sell your user's ... by hellbanner on Monday July 06, 2015 @12:05AM (#9836703)
Yes and some websites refuse + in email.
Re:Ask HN: Have you ever been contacted to sell your user's ... by psherman on Monday July 06, 2015 @01:04AM (#9836909)
That would be preferable to what happened to me once. I tried using a + filter and it was accepted but I never received booking information for my trip. When my trip was getting closer I realized I didn't have a confirmation number, and after a long conversation with customer service, it turned out that instead of "<email>+<filter>@gmail.com" my email address was saved as "<email> <filter>@gmail.com", so nothing ever made it through to me.
Re:Ask HN: Have you ever been contacted to sell your user's ... by cperciva on Monday July 06, 2015 @02:46AM (#9837234)
I'll bet that's a URL-decoding bug -- space gets encoded as plus, so if they decoded an extra time your plus would turn into a space. I've made that mistake a few times myself.
Re:Ask HN: Have you ever been contacted to sell your user's ... by gaadd33 on Monday July 06, 2015 @03:24AM (#9837376)
Even better if you run your own mail server, have it use . as the suffix character instead of + e.g. [email protected] becomes [email protected]

This evades sites that filter on +'s and spammers that strip them out to anonymize their list. Also if they strip out the dots to further anonymize it, they just create invalid email addresses.

Admittedly this only works because not everyone does it.

Re:Ask HN: Have you ever been contacted to sell your user's ... by avinassh on Monday July 06, 2015 @08:03AM (#9838451)
I used to do this when it was new and not many people were aware of it. Nowadays some sites don't accept emails with '+' at all.

Then I setup an forwarding email server, which forward <anything here>@mydomain.com to my main email. So I would register at sites like [email protected]. Sometimes, if required to send emails from registered email then I would create a new email and send.

Now, I have switched to Abine Blur and free version works fine for me. They have a chrome extension and it generates random email whenever you are filling the email field in web forms. (or you can generate random emails at will). Only caveat is, you cannot reply from that email. So, in such cases, I login to the site, change my email to something else and compose emails.

I suggest everyone to using Blur or similar tools. The guys who are running your site will ever know your real email.

Re:Ask HN: Have you ever been contacted to sell your user's ... by ams6110 on Sunday July 05, 2015 @11:16PM (#9836542)
More than a few sites refuse '+' in their email address validators.
Re:Ask HN: Have you ever been contacted to sell your user's ... by imglorp on Sunday July 05, 2015 @11:28PM (#9836576)
I've always wondered if those site inputs are due to ignorance of RFC 2822, or because they are aware of it and are basically letting you know that your address is going out the door. Bad either way :/