4 ms·

Cool project, but what do you gain from publishing most of an email address in the attack log? This is not public information, you shouldn't hint addresses with

Cool project, but what do you gain from publishing most of an email address in the attack log? This is not public information, you shouldn't hint addresses with partial censoring (forgetting domains are clear text and holding personal information). I would not attempt to interact with you because of this. Why not create a fake sender (EG: attacker1,2,3..) per unique account to show individual attempts (keeping the log logic) while protecting your audience`s privacy?

clbrmbr 4mo ago
It is customary that one may publish one’s own personal correspondence unless the other party has requested confidentiality. Maybe this open invitation to the world pushes the boundaries of that definition, but I don’t see where an expectation of privacy comes in here.
- x______________ 4mo ago
  Personal correspondence sure, but it's a contest: applicants don't gain anything from having a partially public entry of their credentials nor does the contest gain from exposing people's credentials. > How It Worked No setup. No registration. Just send an email. There are no contest rules or terms of service to adhere to, while having corporate sponsors that should be complying with data regulations around the world, while having a prize (which is restricted in some parts of the world). >Original prize pool: $100 from me + $200 from Corgea + $200 from an anonymous donor + $500 from Abnormal AI (+ $500 API credits) Definitely a case in keeping all personal details from contestants.. private.
nkrisc 4mo ago
You should assume every email you send to another person will be made public, because once you send it you have no control over it. This is especially true if you don’t know or trust the recipient. Sometimes you just have to hope it won’t be made public.
- x______________ 4mo ago
  > You should assume every email you send to another person will be made public Sure, assuming the interests were mine and mine alone if I had entered.. I replied [0] a bit in line with another reply: this is a contest offering prizes with no tos or privacy policy. There is zero benefit for anyone (contestants, the contest or its results, contest owner, registered companies donating to the prize pool) for contest owner to publish partially redacted personal data. [0] https://news.ycombinator.com/item?id=48693374 https://news.ycombinator.com/item?id=48693374

clbrmbr 4mo ago

It is customary that one may publish one’s own personal correspondence unless the other party has requested confidentiality. Maybe this open invitation to the world pushes the boundaries of that definition, but I don’t see where an expectation of privacy comes in here.

x______________ 4mo ago
Personal correspondence sure, but it's a contest: applicants don't gain anything from having a partially public entry of their credentials nor does the contest gain from exposing people's credentials. > How It Worked No setup. No registration. Just send an email. There are no contest rules or terms of service to adhere to, while having corporate sponsors that should be complying with data regulations around the world, while having a prize (which is restricted in some parts of the world). >Original prize pool: $100 from me + $200 from Corgea + $200 from an anonymous donor + $500 from Abnormal AI (+ $500 API credits) Definitely a case in keeping all personal details from contestants.. private.

nkrisc 4mo ago

You should assume every email you send to another person will be made public, because once you send it you have no control over it. This is especially true if you don’t know or trust the recipient. Sometimes you just have to hope it won’t be made public.

x______________ 4mo ago
> You should assume every email you send to another person will be made public Sure, assuming the interests were mine and mine alone if I had entered.. I replied [0] a bit in line with another reply: this is a contest offering prizes with no tos or privacy policy. There is zero benefit for anyone (contestants, the contest or its results, contest owner, registered companies donating to the prize pool) for contest owner to publish partially redacted personal data. [0] https://news.ycombinator.com/item?id=48693374 https://news.ycombinator.com/item?id=48693374