3 ms·
I have uploaded the email here: https://gist.github.com/aidanbh/3da7cecb3e2496e5c5110b88f21bc317 https://gist.github.com/aidanbh/3da7cecb3e2496e5c5110b88f21b...
by morpheuskafka 6mo ago
I have uploaded the email here: https://gist.github.com/aidanbh/3da7cecb3e2496e5c5110b88f21bc317 https://gist.github.com/aidanbh/3da7cecb3e2496e5c5110b88f21b...
(technically, I guess that doesn't prove anything other than it is in my Sent folder? it has a message ID but I guess only the purelymail admin could confirm that)
In any event, this should never have required an outside reminder. The indexing issue may be something non obvious. But the core decision not to use signed/expiring URLs is nothing less than good old security by obscurity.
- trollbridge 6mo agoI've contacted fiverr before about obvious fraud being conducted through their platform, and they just sent me in endless loops of "open a ticket". "No, e-mail us about it." "No, e-mail us at our security contact about it." Crickets, and then a response saying to please open a ticket. Basically, they aren't set up for anyone to actually contact them and expect a resolution.
- TZubiri 6mo agooh I got that too, Sent an email, "Open a ticket" . Then I see in the support page that the email opened a ticket and it was marked as solved. For sure their internal metrics are all green and solved tickets are on the rise.
- eudamoniac 6mo agoI wouldn't be surprised if their email blocks all unusual TLDs like your .dev.
- ahhhhnoooo 6mo agoSounds like a really bad strategy for a security email address...
- zelphirkalt 6mo agoHow to shoot yourself in both feet 101