3 ms·
he's receiving emails from a fraudulent account that was set up with his email address but with a "." in it. I can't see the vulnerability there but it is impor
by zeedotme 15y ago
he's receiving emails from a fraudulent account that was set up with his email address but with a "." in it. I can't see the vulnerability there but it is important to point out. Paypal should be aware that Gmail allows it. I just created 3 different paypal accounts with the three different email addresses that only differ by the position of the dot.
- MattLangley 15y agoYup. More importantly, they should verify email addresses at registration time and delete accounts which don't get verified. Almost all other sites do this. It's simple best practice and it stops them spamming third parties.
- thisisblurry 15y agoI'm surprised PayPal doesn't already do this. (My account is years old, so I don't know their current practices for creating new accounts). Twitter and Facebook both do.