3 ms·
You would serve a different trap address to each app, nobody but Dropbox would have the Dropbox trap.
by wlesieutre 6y ago
You would serve a different trap address to each app, nobody but Dropbox would have the Dropbox trap.
- ceejayoz 6y agoNobody but Dropbox and anyone with the Dropbox app on their phone. It has to get from the user's phone to Dropbox, which means it's on the user's phone at some point, barring some sort of convoluted user --> Apple --> Dropbox transfer scheme.
- wlesieutre 6y agoRight, the Dropbox app on their phone is asking the OS for contact info, which the phone generates and provides to the Dropbox app and only the Dropbox app. Any other app would get a different fake address. Or are you talking about the scenario where competitor apps use some kind of sandbox escape to jump out and steal other apps' trap addresses from the OS?
- sobani 6y agoI figure that's what @ceejayoz is talking about. This probably won't happen between 'mom and pop' apps, but maybe a failing SV unicorn might become desperate enough to pay $1MM, or however much a blackhat will ask for this service, to trash their main competitor.
- rendall 6y agoEach user has their own trap email for each application. The ban would happen for that user only