3 ms·
Won't the bad people just scan for gmail accounts and take off the wildcard part?
by lordnacho 5y ago
Won't the bad people just scan for gmail accounts and take off the wildcard part?
- bluetidepro 5y agoI don't know about Gmail (I have a different service), but they don't seem to. This trick has seemed to work for pretty much all breaches I've seen. Like the recent Peloton one, I started to get spam to `blah+peloton@` and then changed it, and haven't gotten any single spam since the change. They must not put that much effort into the way they check or send the emails. ¯\_(ツ)_/¯
- jayknight 5y agoThe plus sign thing works with other email providers and servers. I used to use it with self-hosted postfix and I know it's possible with exim as well. I think exchange can do it as well. I would assume that any sophisticated spammer would try removing plus sign suffixes from harvested emails.
- deleted 5y ago[deleted]