3 ms·
All these leaks are making me feel anxious to go around deleting anything I no longer use and be more careful about signing up for anything without FB/Google lo
by kylehotchkiss 9y ago
All these leaks are making me feel anxious to go around deleting anything I no longer use and be more careful about signing up for anything without FB/Google login. It seems like only giant companies have the competence to maintain security BUT even then, Yahoo proves me wrong on that one.
That said, I'm sort of happy 1password switched to subscription billing - hopefully this lets them pay top dollar for the best security experts.
- Ibethewalrus 9y agoSomeone posted on HN fastmail includes a very unusual and nice way to stop spam using alias, basically it's mailinator baked in: https://www.fastmail.com/help/receive/aliases.html https://www.fastmail.com/help/receive/aliases.html
- carrier_lost 9y agoOutlook.com offers aliases too: https://support.office.com/en-us/article/Add-or-remove-an-email-alias-in-Outlook-com-459b1989-356d-40fa-a689-8f285b13f1f2 https://support.office.com/en-us/article/Add-or-remove-an-em...
- rhblake 9y agoI don't think Outlook.com supports catchall/wildcard aliases though, which makes using unique addresses for everything a bit annoying, which makes address reuse more likely.
- carrier_lost 9y agoInteresting point! I hadn’t thought about wildcards in aliases.
- nathanaldensr 9y agoI pay for FastMail for this very reason. When I transferred off my Google Apps email account, I set up a unique ___@ for every website. If my email ever leaks, I'll know who leaked it (or sold it).
- rhblake 9y agoSame here. I simply set up a catchall alias so <anything>@somedomain forwards to foo@regulardomain; very convenient. The fact that FastMail supports multiple custom domains, at least with standard accounts, is also nice -- even more so since you can (optionally) use their own nameservers and set up whatever DNS records you want (I use that for some personal websites), while they make sure SPF/DKIM records are always correct. (Having a separate domain is not really necessary, but I registered it through nearlyfreespeech.net and use their WHOIS privacy service; at least J. Random can't easily figure out my identity based on the email address alone).