3 ms·

I've been vending myself unique email addresses for every online account I use for about 3 years. They are nice because I can reply to them like a regular mail

I've been vending myself unique email addresses for every online account I use for about 3 years. They are nice because I can reply to them like a regular mail and my actual email account gets stripped out automagically. I've been considering making it a product and I wonder in this case what people would want to do when the account data gets leaked? 1. blackhole all email to the address. 2. forward all email to some email service that is never/rarely used. 3. flag messages that are not sent from the matching domain (doordash.com in this case). 4. blackhole and generate a new address so the user can go back to door dash and provide a fresh email address. I also wonder if there is any use for meta data on who's trying to email a blackholed email addrress e.g spam blacklisting.

novok 7y ago
You can do something similar with fastmail. Get a domain for your email and make an alias address of the form [anything]@[alias].domain.com . You can then make 'sending identities' for an instance of that catchall domain for the rare time you need to send email as mortgage_company@a.domain.com . You can also create rules to blackhole a specific alias email or whatever you want when you need to invalidate the email.
- greenail 7y ago
  So how would you handle this breach with your fastmail alias?
  - novok 7y ago
    If I start noticing annoying spam being sent to doordash@a.domain.com then I make an email rule to delete it and change my doordash account email to doordash_again@a.domain.com along with a password change with my password manager?
    - munk-a 7y ago
      It'd be nice if there was a way to way that pile of emails at some authority and say "Here, this is the crap that's come of that data breach." Ditto for any authorized (but shady) third party data sharing. Sadly we currently lack a consumer protection bureau.
      - kilburn 7y ago
        This is the part the is really missing. I use user.site@mydomain.com whenever I sign up at random sites. Last night I got a bunch of spams at the just-eat [1] account (food delivery, operating in 13 countries so not a small operation). Now I know they've been breached, but: 1. They haven't reported it anywhere. 2. I don't know of any meaningful action I can take. [1] https://en.wikipedia.org/wiki/Just_Eat https://en.wikipedia.org/wiki/Just_Eat
        novok 7y ago
        That would be an interesting project, create the breach-via-spam sensor network via accounts. It also might not be a breach, but could of been sold via some sort marketing 'partnership'.
        jbkly7 7y ago
        You could submit evidence of the breach to security researcher Troy Hunt at HaveIBeenPwned (https://haveibeenpwned.com/FAQs#SubmitBreach https://haveibeenpwned.com/FAQs#SubmitBreach). He maintains a database of data breaches and people can sign up to be notified if their info appears in a new breach.
        ipsi 7y ago
        They're headquartered in the UK, so I'd start with making a complaint via the Information Comissioner's Office: https://ico.org.uk/make-a-complaint/ https://ico.org.uk/make-a-complaint/. The best option is probably "Your personal information concerns": > If ... you’re concerned about how an organisation has handled your information – if the information is wrong, they have lost it or disclosed it to someone else – tell us.
- chewz 7y ago
  Fastmail also have tons of alternative domains like nospammail.net so you can make your registering emails in a domain that is separate from you email address. So your address is me@fastmail.com but you could use adresses like mortgage_company@alias.nospammail.net...
magashna 7y ago
Some email services let you receive to a wildcard, so anything on your domain. Also I believe Blur already does this (the company name may have changed but I forget)

novok 7y ago

You can do something similar with fastmail. Get a domain for your email and make an alias address of the form [anything]@[alias].domain.com . You can then make 'sending identities' for an instance of that catchall domain for the rare time you need to send email as mortgage_company@a.domain.com . You can also create rules to blackhole a specific alias email or whatever you want when you need to invalidate the email.

greenail 7y ago
So how would you handle this breach with your fastmail alias?
- novok 7y ago
  If I start noticing annoying spam being sent to doordash@a.domain.com then I make an email rule to delete it and change my doordash account email to doordash_again@a.domain.com along with a password change with my password manager?
  - munk-a 7y ago
    It'd be nice if there was a way to way that pile of emails at some authority and say "Here, this is the crap that's come of that data breach." Ditto for any authorized (but shady) third party data sharing. Sadly we currently lack a consumer protection bureau.
    - kilburn 7y ago
      This is the part the is really missing. I use user.site@mydomain.com whenever I sign up at random sites. Last night I got a bunch of spams at the just-eat [1] account (food delivery, operating in 13 countries so not a small operation). Now I know they've been breached, but: 1. They haven't reported it anywhere. 2. I don't know of any meaningful action I can take. [1] https://en.wikipedia.org/wiki/Just_Eat https://en.wikipedia.org/wiki/Just_Eat
      - novok 7y ago
        That would be an interesting project, create the breach-via-spam sensor network via accounts. It also might not be a breach, but could of been sold via some sort marketing 'partnership'.
      - jbkly7 7y ago
        You could submit evidence of the breach to security researcher Troy Hunt at HaveIBeenPwned (https://haveibeenpwned.com/FAQs#SubmitBreach https://haveibeenpwned.com/FAQs#SubmitBreach). He maintains a database of data breaches and people can sign up to be notified if their info appears in a new breach.
      - ipsi 7y ago
        They're headquartered in the UK, so I'd start with making a complaint via the Information Comissioner's Office: https://ico.org.uk/make-a-complaint/ https://ico.org.uk/make-a-complaint/. The best option is probably "Your personal information concerns": > If ... you’re concerned about how an organisation has handled your information – if the information is wrong, they have lost it or disclosed it to someone else – tell us.
chewz 7y ago
Fastmail also have tons of alternative domains like nospammail.net so you can make your registering emails in a domain that is separate from you email address. So your address is me@fastmail.com but you could use adresses like mortgage_company@alias.nospammail.net...

magashna 7y ago

Some email services let you receive to a wildcard, so anything on your domain. Also I believe Blur already does this (the company name may have changed but I forget)