3 ms·

how I hate this kind of reporting 3 people complain on reddit and it's now "[COMPANY X] under siege"

by afrcnc 6y ago

jlgaddis 6y ago
Between the comments on the article itself and this HN thread, there's already more than 10 times that. It's not being exaggerated quite the way that you "hate". To further prove how bad SendGrid is, Invaluement recently spent a ton of time and energy to create an entirely new "Service Provider DNSBL" [0] -- just for SendGrid! In fact, they just announced it about a week ago [1]. [0]: https://www.invaluement.com/serviceproviderdnsbl/ https://www.invaluement.com/serviceproviderdnsbl/ [1]: https://www.mail-archive.com/mailop@mailop.org/msg11403.html https://www.mail-archive.com/mailop@mailop.org/msg11403.html
krebsonsecurity 6y ago
Spend a few minutes looking at the spam list threads linked in the article. This is not just a few people complaining. E.g.: https://www.mail-archive.com/search?l=mailop%40mailop.org&q=sendgrid https://www.mail-archive.com/search?l=mailop%40mailop.org&q=... There was a ton of material I did not include in the story, including a story from a company that had a client have 40 million phishing emails sent through their Sendgrid account, which it turns out was set up by an employee long ago who was no longer with the company and had not turned on 2FA (and probably was re-using passwords). I started reporting this story almost a month ago after receiving more than 3 emails from different IT experts who were really frustrated with the amount of malware and phishing coming from Sendgrid accounts. They were frustrated because they couldn't block Sendgrid outright because too many companies they were expecting regular emails from used the platform. The day before I published the story, I head from someone else who was getting phishing attacks spoofing Aruba Networks.
tobltobs 6y ago
You also could have a look on twitter how many people with hacked accounts try to reach sendgrid support via this channel.

how I hate this kind of reporting 3 people complain on reddit and it's now "[COMPANY X] under siege"

by afrcnc 6y ago

how I hate this kind of reporting 3 people complain on reddit and it's now "[COMPANY X] under siege"

Between the comments on the article itself and this HN thread, there's already more than 10 times that. It's not being exaggerated quite the way that you "hate". To further prove how bad SendGrid is, Invaluement recently spent a ton of time and energy to create an entirely new "Service Provider DNSBL" [0] -- just for SendGrid! In fact, they just announced it about a week ago [1]. [0]: https://www.invaluement.com/serviceproviderdnsbl/ https://www.invaluement.com/serviceproviderdnsbl/ [1]: https://www.mail-archive.com/mailop@mailop.org/msg11403.html https://www.mail-archive.com/mailop@mailop.org/msg11403.html

krebsonsecurity 6y ago

Spend a few minutes looking at the spam list threads linked in the article. This is not just a few people complaining. E.g.: https://www.mail-archive.com/search?l=mailop%40mailop.org&q=sendgrid https://www.mail-archive.com/search?l=mailop%40mailop.org&q=... There was a ton of material I did not include in the story, including a story from a company that had a client have 40 million phishing emails sent through their Sendgrid account, which it turns out was set up by an employee long ago who was no longer with the company and had not turned on 2FA (and probably was re-using passwords). I started reporting this story almost a month ago after receiving more than 3 emails from different IT experts who were really frustrated with the amount of malware and phishing coming from Sendgrid accounts. They were frustrated because they couldn't block Sendgrid outright because too many companies they were expecting regular emails from used the platform. The day before I published the story, I head from someone else who was getting phishing attacks spoofing Aruba Networks.

tobltobs 6y ago

You also could have a look on twitter how many people with hacked accounts try to reach sendgrid support via this channel.