23 ms·
This very looks cool, thank you for sharing parent. I apologize for the nitpick, but I hope there will be some guidance on what an "anonymous" email is. (Ex:
by dontbenebby 7y ago
This very looks cool, thank you for sharing parent.
I apologize for the nitpick, but I hope there will be some guidance on what an "anonymous" email is.
(Ex: Guerilla at a public wifi like a library, an email created at a library, but not your usual email from a place other than your home)
I worry sometimes that we assume people reporting security vulnerabilities will be security experts.
I often meet people who are intelligent and technical, but either do not understand security, or understand it in terms of confidentiality, integrity, and availability (CIA triad) and flounder when thinking about anonymity.
- wry_discontent 7y agoOut of curiosity, what's the point of the anonymous email? Why not just use my regular email?
- overflow897 7y ago"Person X reported a vulnerability, they must be a hacker! Get our lawyers" - Some non-technical bank person. Most companies don't like having their mistakes publicly exposed.
- ghostpepper 7y ago> I often meet people who are intelligent and technical, but either do not understand security, or understand it in terms of confidentiality, integrity, and availability (CIA triad) and flounder when thinking about anonymity. Can you suggest any resources for a technical user who would like to learn more about this distinction?
- schoen 7y agoYou might like some of the papers at https://www.freehaven.net/anonbib/ https://www.freehaven.net/anonbib/
- dontbenebby 7y agoA good one to start with would be this paper: https://www.freehaven.net/anonbib/cache/chaum-mix.pdf https://www.freehaven.net/anonbib/cache/chaum-mix.pdf It's one of the earliest and very well cited.
- otachack 7y agoAn easier way may be to anonymously message a tech savvy media company or security firm, maybe via snail mail even. You can do it anonymously yourself but it'll take some work and a mashup of: - VPN service where you pay with cash (Mullvad) - Temporary email (Protonmail?) - One time use computer (cybercafe, pay with cash?) There's layers you can apply like a TOR browser usage but it'll take more effort/learning.
- aledalgrande 7y agoOr you could email Troy Hunt
- exikyut 7y agoThe difficulty there is cybercafe PCs that are locked down and won't run .EXEs.
- dontbenebby 7y agoI've probably been watching too many true crime shows but I suspect it'd be difficult to send a letter w/o leaving fingerprints or dna
- austincheney 7y agoAnonymity is a part of confidentiality.