3 ms·
Was just able to confirm, it's up to and including your email address. Mine starts with m so I see 3,761 email addresses. But for me, none lexicographically aft
by mholt 10y ago
Was just able to confirm, it's up to and including your email address. Mine starts with m so I see 3,761 email addresses. But for me, none lexicographically after my email address are exposed.
Edit: Just want to add that I've made a similar mistake before (with a smaller user base). So I understand how easily these bugs occur. Given all their progress in the last few years, I still believe that the privacy and security of such a large portion of the Web could not be in better hands. Props to the LE team for a quick, responsible response.
- turbohedgehog 10y agoYou mean M, not m. (it's in ASCII order). Also giving out the number of addresses you see will allow someone after yours to connect your username with your email address if you weren't aware.
- mholt 10y agoYes, sorry, "M". And if this comment[1] is true, then that number won't reveal much. Their mailer is probably distributed across several nodes. [1] https://news.ycombinator.com/item?id=11881953 https://news.ycombinator.com/item?id=11881953
- turbohedgehog 10y agoMultiple different images and a pastebin I saw posted on twitter showed the same starting set of emails.