3 ms·
They're actually downright expensive addresses to maintain, and they don't cost tech support cycles, they cost security engineer time. A basic tech support per
by droopyEyelids 13y ago
They're actually downright expensive addresses to maintain, and they don't cost tech support cycles, they cost security engineer time.
A basic tech support person might be able to fend off the dozens of word salad "security notifications" sent by ESL students, but as they get more complicated and no less often irrelevant, you need people who actually know how your infrastructure works.
On top of the technical hassle comes the customer experience hassle of keeping a bunch of wanna be hackers happy as they demand rewards and their name on your site for their idea of a CRSF vulnerability that happens to have no basis in reality.
- tptacek 13y agoThe backlash against these aliases is perceptible, but remember that the worst-case scenarios we're talking about today, when those addresses aren't properly staffed, was the default case before they became a common feature of startups.