Every time I have imposter syndrome (at 51 years old, even), I see crap like this and think: Why do I sell myself short? Because I’m not the smarted tool in the shed, but jesus christ I ain’t THIS stupid. Anyone pulling that stupidity should feel nothing but shame. Ugh.
I’m not the smarted tool in the shed
🤦♂️
DO NOT MAEK FUN OF MY TYEPING, I AHVE IMPROSTER SYNDORM
hehehe
Thankfully I do understand irony. And I’m leaving it there so others can point and laugh. :D
Thanks mate - you made me spit out my tea 😆
oh geez, I didn’t mean to cause a disaster! D: lol
well, the years start comin’ and they don’t stop comin’
Okay, but on mobile I have to say I mean the correct thing and often have to correct multiple time, often editing afterwards.
Sounds like this guy knows way more than me…
“It is too much,” Solovewicz says, emphasizing that people shouldn’t assume a domain is unmonitored. “I’m at the point where this would now be a full-time job to handle every single one of these—that’s part of my motivation to talk about this, it is my responsible disclosure. You guys need to fix your systems and not do this and not leak your customer data and your employee data and your own internal data.”
But couldn’t he just set up an “out of office” so that every single time he gets an email, a response is sent saying:
Hey bro, this is a real email address, you just sent me stuff you probably shouldn’t. No big deal, but you’re going to keep getting this automated emails. Please fix your security.
If you get stuck in a loop of automated messages (likely) that’s going to flow a massive flag up at the company, and someone is going to look at it why it’s happening.
It’s impossible for a human to handle it, but that doesn’t mean it can’t be handled.
The domain would get flagged as spam for sending that many emails
Anytime you autoreply to email, it means a spammer can spoof the sender and spam you with hundreds of emails, which you will faithfully reply with “This address is not monitored” - but you’re sending those replies out to people who didn’t send them to you, and typically attaching the original message, meaning the spammers get a free spam reflection service from you - you sending their spam to all those people.
So please don’t use autoresponders.
Or only use it on domains with SPF set up for hard fail, and for emails that pass SPF
What started out as a personal email project has become a large-scale effort to warn businesses and other groups that they have misconfigured their internal systems and are accidentally sharing sensitive information.
Traitor…
…
If a corp is sending your personal information to random email addresses, it is in your best interest for them to stop.
This person, is trying to get corps to stop, because it’s bad for people.
They are not trying to save corps at the expense of people, which is what you seem to think is happening
If you quietly contract the company, they work to mitigate corporate liability, any benefit to you as user is unintentional. Say it loud and publicly and you empower users to start cleaning up the mess created by company and company gets public shame and pressure to actually fix. Literally no reason to quietly appeal to companies first, both are covered if you go public first
Welp, I feel any future attempt to explain something to you will work out the same…
And I’m not signing up for that hassle and frustration
We’re all so lucky to have had the brief moment with you that we did. We’re all devastated by the loss of your future gifts.
BTW, it’s fine if you bypass the overly dramatic gesture next time and just say, “my mom is home and I don’t want my chicken nuggets to get cold, so I’m going to go now. Bye bye.”
“Man attempts to stop corporatuons from leaking data”
“Hey fuck that guy!”
???
But why? Why are they sending corporate data to a website they don’t own?
What’s the point?
deleted by creator
I owned nothome.com for a while. A lot of people used to suffix their domain name with the ‘not’ prefix when giving out email addresses.
“I heard Suzanne from HR smokes weed”
…so people actually reply to noreply?
