5 ms·
Protecting your email with 'AT domain DOT com' is making it easier to find
- olalonde 17y agoWhatever, I never get spam with Gmail.
- tome 17y agoHow do you know Gmail doesn't misclassify valid mail as spam? This is what terrifies me about the thought of using a spam filter: false positives.
- endtwist 17y agoGMail's filter is actually incredibly accurate, and if you periodically scan your spam for anything that shouldn't be in there, you've really got nothing to worry about. I've only found three or four false positives in the five and a half years I've been with GMail.
- tome 17y agoWhen I used spam filtering I was receiving perhaps ten spams for every valid mail. This made it very difficult to scan my filtered mail. There was just so much of it.
- aarongough 17y agoWhen using Gmail I have a bunch of filters that make it easier to read through my spam mail. For instance: IF X email is in the spam folder AND contains any of the words (Cialis, Viagra, Rolex, etc...) -> Move it immediately to the trash. This cuts down the number of emails that stay in my spam folder by a huge margin, and makes it much easier to check for false positives. That being said, I no longer even bother checking. I've been with Gmail for 5 years and I've never had a false positive.
- sharpn 17y agoso if someone includes the word 'specialist' in an email to you, you would never see it. spe cialis t
- philwelch 17y agoYes, the Scunthorpe problem: http://en.wikipedia.org/wiki/Scunthorpe_problem http://en.wikipedia.org/wiki/Scunthorpe_problem
- RK 17y agoAfter college I worked as a network administrator for a doctors office that dealt with pain medications. We constantly had problems with work mail going to the spam folder when it actually concerned drugs like Vicodin.
- aarongough 17y agoThe salient point here is the email have to already be in the spam box. If Gmail already thinks it's spam AND it contains any of the keywords, then it gets trashed. That being said, you still have a point.
- gojomo 17y agoIf you've reviewed the spam folder so closely you're certain you have no false positives, it may not be saving you any time. If you give it a more cursory review, then your claim is really, "I've never noticed a false positive."
- mattyb 17y agoI've seen one false positive since I started using Gmail in 2005. It was an important email, but I'm far from terrified.
- deleted 17y ago[deleted]
- sjs382 17y agoI don't know, but I don't sweat it either. Anyone who is sending me super-important email has other ways of contacting me if they don't get a response. And in the case that they dont, a missed email still isn't the end of the world.
- prawn 17y agoIf you rely on business leads where the sender is also contacting competitors, those "others ways" won't always matter and you'll just miss the job. That's my concern. That said, I openly list my email address online (and have with the same address for 12+ years) and have really average filtering that leaves me deleting spam that slips through and chasing down false positives.
- notaddicted 17y agoFor about 1 year I checked my spam folder. After never seeing a false positive, and only 1 or 2 spam in my inbox, I stopped checking. aside: for poor man's obfuscation (like in my HN profile) I do jhl805atgmaildotcom ... my belief is that this is hard to extract automatically.
- sokoloff 17y agoIf the regexp: ([^\s]+)\s*[Aa][Tt] *([^\s]+)\s*[Dd][Oo][Tt]\s*[Cc][Oo][Mm] matches text in an exemplar, it's worth checking out as a possible email address (assuming one is a low-down, good-for-nothing spammer) Yours is no harder to pull out automatically than the examples in the original article, and the above regexp took me under 2 minutes to write and verify. It's not your "obfuscation" that's saving you, it's gmail's spam filtering.
- olalonde 17y agoMy take on this: the benefit of filtering spam largely outweighs the downside of false positives (which, as far as I know, never happened to me and if it did, it probably wasn't that bad since I didn't notice). If someone really needs to contact me, the said person can message me on my various social profiles or simply call me.
- JacobAldridge 17y agoI don't use gmail for anything that can't be missed. I periodically run a search in my work mail Spam folder for my first name - anything addressed to me will have Jacob in it, but the spam can't work it out from the address (jaldridge@). Found one false positive in the last six months, and even that was a mailing list so didn't matter.
- sp332 17y agoIt hardly ever happens. Real-world example: http://twitter.com/textfiles/status/6234139001 http://twitter.com/textfiles/status/6234139001
- deleted 17y ago[deleted]
- varenc 17y agoMe neither! One of the points I try to make at the end of post though is since gmail seems to stop all spam anyway, lets all just start using a nice readable email address on the internet.
- miles 17y agoFrom your article: Its pretty well established that “email AT domain DOT com” offers only marginal protection from spammers And yet the 1.5 year experiment pointed out by eli indicates that this form of obfuscation is among the most effective ways to avoid spam: http://techblog.tilllate.com/2008/07/20/ten-methods-to-obfuscate-e-mail-addresses-compared/ http://techblog.tilllate.com/2008/07/20/ten-methods-to-obfus...
- dkersten 17y agoSure you do, it just gets filtered into the spam folder.
- dan_sim 17y agoA basic search also returns things like "XYZ(AT)gmail(DOT)com", "XYZ[at]gmail[dot]com" and xyz.at.gmail.dot.com . It returns everything, no matter how clever you think you are. And it's not that hard to write a regexp that replace this all into your actual email...
- Retric 17y agoMy gmail address is not fark.sam, but if it was you could still figure it out. Getting a regex to do that correctly would be a pain. As would replace the v with a n in avother@gmail address. Still my gmail account was getting spam before I started to use it. So I think simple spray and pray approaches will catch most people.
- eli 17y agoMy experience shows that simple bots looking for mailto: links still work just fine. I doubt many spammers are going to go through the trouble of decoding even simple obfuscation. There used to be a website where a guy actually tried different methods for posting an email address on the web and then measured the number of junk messages at each address. Wish I could remember where I saw it.
- eli 17y agoHere it is: http://techblog.tilllate.com/2008/07/20/ten-methods-to-obfuscate-e-mail-addresses-compared/ http://techblog.tilllate.com/2008/07/20/ten-methods-to-obfus... A bit dated now, but using AT and DOT cut the spam to basically negligible levels.
- xtho 17y agoIt's quite interesting that the javascript-version got more spam than the simple AT/DOT one. That's surprising---at least to me it is.
- est 17y agocache: http://74.125.153.132/search?hl=en&q=cache:http://varenhor.st/2010/01/email-at-domain-dot-com-is-making-a-spammers-job-easier/ http://74.125.153.132/search?hl=en&q=cache:http://varenh... tl;dr: you can search 'AT gmail DOT com' on google I think this technique has been doing by spammers for decades. The best way to prevent email harvest bots is to use DOM+JS, something like <span id='my_span' my_chars='onix'>elec</span>tr <script id='my_script' language='javascript'>document.write(document.getElementById("my_script").parentNode.firstChild.getAttribute('my_chars')+String.fromCharCode(0x74, 0141, 115-1))</script> @gmail.com
- varenc 17y agoThe trouble with these and some other solutions (like use of imgs), is that they aren't an option on something like linkedin.com or a forum where users can only post text!
- jgrahamc 17y agoYou could always use JEAIG: http://jeaig.org/ http://jeaig.org/
- bonsaitree 17y agoWhy is this news?! Follow Postel's law and simply apply (ever cheaper) horsepower to filtering on the back-end + gray-listing & white-listing. This IS NOT rocket science people. If one can write a regular expression to parse the "obfuscated" content, it's just one more rule in a markov validation chain in a data mining script. "...Same as it ever was..."--The Talking Heads
- gahahaha 17y agobut it signifies that I am competent enough to not reply to spams
- techiferous 17y agoOn my about page, I simply display my email address as an image instead of text. http://techiferous.com/about/ http://techiferous.com/about/ This does have significant disadvantages, the worst being that users cannot cut and paste the address.
- jamesshamenski 17y agoI like to say James2456 of Gmail it's the avant garde thing to do
- sjs 17y agoI like that. I've been using "my.username at gmail" ... fairly close but I might switch to "of". As a bonus it might filter out humans you'd rather not converse with as well.
- zoba 17y agoI haven't heard of any email harvesters getting around my Email Icon Generator (yes, it is the original!). Just enter your email and it gives you an image of your email address to link to. http://services.nexodyne.com/email/ http://services.nexodyne.com/email/
- olalonde 17y agoNice tool, although embedding images isn't always an option. Thanks for sharing.
- rtomayko 17y agoI recommend "me MONKEY TAIL domain FULL STOP com". More: <http://ascii-table.com/pronunciation-guide.php> http://ascii-table.com/pronunciation-guide.php>