372
A researcher bought noreply.net. Companies started sending him secrets.
(arstechnica.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 10 Aug 2026
372 points (99.5% liked)
Not The Onion
22224 readers
1112 users here now
Welcome
We're not The Onion! Not affiliated with them in any way! Not operated by them in any way! All the news here is real!
The Rules
Posts must be:
- Links to news stories from...
- ...credible sources, with...
- ...their original headlines, that...
- ...would make people who see the headline think, “That has got to be a story from The Onion, America’s Finest News Source.”
Please also avoid duplicates.
Comments and post content must abide by the server rules for Lemmy.world and generally abstain from trollish, bigoted, ableist, or otherwise disruptive behavior that makes this community less fun for everyone.
And that’s basically it!
founded 3 years ago
MODERATORS
Sounds like this guy knows way more than me...
But couldn't he just set up an "out of office" so that every single time he gets an email, a response is sent saying:
If you get stuck in a loop of automated messages (likely) that's going to flow a massive flag up at the company, and someone is going to look at it why it's happening.
It's impossible for a human to handle it, but that doesn't mean it can't be handled.
The domain would get flagged as spam for sending that many emails
Anytime you autoreply to email, it means a spammer can spoof the sender and spam you with hundreds of emails, which you will faithfully reply with "This address is not monitored" - but you're sending those replies out to people who didn't send them to you, and typically attaching the original message, meaning the spammers get a free spam reflection service from you - you sending their spam to all those people.
So please don't use autoresponders.
Or only use it on domains with SPF set up for hard fail, and for emails that pass SPF
Traitor...
...
If a corp is sending your personal information to random email addresses, it is in your best interest for them to stop.
This person, is trying to get corps to stop, because it's bad for people.
They are not trying to save corps at the expense of people, which is what you seem to think is happening
If you quietly contract the company, they work to mitigate corporate liability, any benefit to you as user is unintentional. Say it loud and publicly and you empower users to start cleaning up the mess created by company and company gets public shame and pressure to actually fix. Literally no reason to quietly appeal to companies first, both are covered if you go public first
Welp, I feel any future attempt to explain something to you will work out the same...
And I'm not signing up for that hassle and frustration
We're all so lucky to have had the brief moment with you that we did. We're all devastated by the loss of your future gifts.
BTW, it's fine if you bypass the overly dramatic gesture next time and just say, "my mom is home and I don't want my chicken nuggets to get cold, so I'm going to go now. Bye bye."
"Man attempts to stop corporatuons from leaking data"
"Hey fuck that guy!"
???
Please explain your reasoning for calling him a traitor.
Because it's not an accident. And he's quietly going to the businesses first to try to let them internally address and attempt to cover up and only going public as a last resort.
As a person, and not a business, his loyalty should be to people. The bully only responds to sunlight.
You do realize that by telling companies they have vulnerabilities, they're protecting the people whose information they store, right?
Do you really want him publicly releasing vulnerabilities so the company gets hacked?
You do realize that you can't go 2 days in modern world without hearing about a giant sensitive dataset being exposed. So yes, more sunlight is needed for any chance of meaningful change These companies can choose to staff up and prioritize sarety, because they don't do that now obviously. They don't give a shit and it shows. And they don't really have to as long as well meaning folks politely do that work for them free of charge - not the IT work, the PR work of sweeping their misdeeds under the rug.