News for hackers. Stuff that matters.

tmdetect

Re:Ask HN: What are you working on? (June 2026) on Monday June 15, 2026 @04:26AM (#48538255)
Working on growing the customer base and marketing efforts for https://tempmaildetector.com. Nothing glamorous, but it's got to be done.

I did expose some interesting stats which you can find here: https://tempmaildetector.com/temp-mail-market-share

Great read. I also recently moved everything over from DO to Hetzner for https://tempmaildetector.com across different regions*, and greatly simplified the server infra in the process. The other added benefit is that the resources available on each server are so great in comparison to DO that there’s plenty of room to grow vertically before even taking into account the additional horizontal scaling we can use thanks to the load balancing in place.

So a big win win all round. So good to see European providers are finally having their moment.

* I wish there were even more available and not sold out regions across Europe.

+1 to running services on physical servers, OVH in my case. I'm really enjoying CI pushing to servers and having managed database provided by a 3rd party like Mongo Atlas.
Re:Ask HN: What Are You Working On? (October 2025) on Monday October 13, 2025 @05:36AM (#45566520)
Working away at https://TempMailDetector.com, a privacy focused disposable email detection API which only requires the domain part and not the user part of the email. The service is able to determine if a domain is likely a disposable email, a forwarding service, and actively crawls for new domains.
Re:How to self-host a web font from Google Fonts on Monday September 15, 2025 @11:56AM (#45251240)
I used to use Google fonts a fair amount, but why do I need to download a font when my browser/os already have a reasonable amount of good ones? Engineer aesthetic/logic maybe?

I had to go digging for it again and I've now bookmarked it, but this website/repo has some nice examples: https://modernfontstacks.com/

Re:Guy running a Google rival from his laundry room on Wednesday September 10, 2025 @10:43AM (#45198497)
Kagi is a polished product. This is drying someones laundry.
Re:Defense.gov Now Redirects to War.gov on Wednesday September 10, 2025 @07:31AM (#45196166)
A top contender for “not the onion”.

> Hegseth concurred with Trump's contention.

> "We changed the name after World War II from the Department of War to the Department of Defense and … we haven't won a major war since," Hegseth said.

Re:Experimenting with Local LLMs on macOS on Monday September 08, 2025 @11:44AM (#45169734)
I think what you want is this: https://github.com/mlc-ai/web-llm
Looking further

* uBlock Origin and Lite have it as an option under Filter List > Privacy > Block Outsider Intrusion into LAN

* Brave prevents it, tested with Aggressively block Trackers and Ads.

Very interesting. Having looked at NoScript it seems like you can disable LAN as a default value under the allow tab.
Re:"Email is Easy" email address quiz on Sunday August 17, 2025 @04:26PM (#44934652)
Funny. I definitely knew there were some unique characteristics, but this took it to a new level.
Agree, the local translation is borderline unusable. I've had to change browsers as a result.
Re:Ask HN: What are you working on? (July 2025) on Monday July 28, 2025 @12:26PM (#44712388)
I appreciate your sentiment, and agree to a point. There’s a time and a place for both disposable email addresses as well as blocking apis.

Assume you offer a free trial with LLM capabilities. There’s a very real cost associated with multiple signup abuse. You can card capture or KYC, but now there’s more friction and greater loss of privacy.

Re:Ask HN: What are you working on? (July 2025) on Monday July 28, 2025 @10:08AM (#44711045)
I’m working on https://tempmaildetector.com and more specifically a Wordpress plugin to support it: https://wordpress.org/plugins/temp-mail-detector-block-tempo...

The plugin offers users a way to input their own block lists, a pre-existing one, or make use of the API which is constantly getting updated.

As a first time Wordpress plugin developer, the approval process was a bit slow but it’s like that for a good reason.

A red flag for you yes, but your parents?
My advice here is pretty standard: If you get an email that requires an action, go to the website directly. Don't click any links.

It adds friction, but does solve the problem. For banking/systems, I'd much rather have the friction.

I think it’s fairly clear from everyone’s comments that this is a card testing scheme. Now it’s how you respond to it that matters.

You’re essentially playing a game of cat and mouse. There’s 12 new domains added today for one provider for example [0].

Use a 3rd party api to block these (disclaimer, this is what I do) and keep layering your security. Note that I’ve seen an increase in gmail temporary email providers, so while many here will disagree, blocking plus emails and . emails is absolutely a valid tactic during this attack period.

[0] https://tempmaildetector.com/provider/temp-mail.org

+1 to WireGuard. For people new to it, there are some great scripts which set up and configure it for you like https://github.com/Nyr/wireguard-install
Re:Visit Bletchley Park on Friday August 30, 2024 @09:10AM (#41400343)
You would think they would make the differentiation quite obvious. Thanks for the TNMOC tip.