Acidus wrote:
] ] *** Willhackforfood.biz: free disposable email accounts
] ] ***
] ] "Avoid SPAM *and* protect your privacy at the same time
]
] Stankdawg created this project. Others exists, (like
] dodgeit.com) But they have no has no password protection and
] allowed people to reuse email address. If I know you used
] dodgeit to register for an account somewhere, I can simply
] reuse the email account name and ask the website to reset your
] password. Then I go claim it.
]
] This is a cool idea.

Another site in a similar vein: www.spamgourmet.com

As a side note, the security hole of non-password protected temporary email accounts is interesting, and honestly is not something I had thought of.

Romanpoet wrote:
] Acidus wrote:
] ] ] *** Willhackforfood.biz: free disposable email accounts
] ] ] ***
] ] ] "Avoid SPAM *and* protect your privacy at the same time
] ]
] ] Stankdawg created this project. Others exists, (like
] ] dodgeit.com) But they have no has no password protection and
]
] ] allowed people to reuse email address. If I know you used
] ] dodgeit to register for an account somewhere, I can simply
] ] reuse the email account name and ask the website to reset
] your
] ] password. Then I go claim it.
] ]
] ] This is a cool idea.
]
] Another site in a similar vein: www.spamgourmet.com
]
] As a side note, the security hole of non-password protected
] temporary email accounts is interesting, and honestly is not
] something I had thought of.

This project came about when I backdoored an account that I noticed on a site I frequent. I gave a presentation on it at my local 2600 meeting detailing the step-by-step "0wnage" and then the new solution of WH4F mentioned above. I also offered to present it at phreaknic but it was last minute to fill a gap and they went with some impromptu stuff instead.

I submitted an article detailing it to 2600 which I hope will be published and maybe I can present this at interz0ne or something.

Acidus wrote:
] ] *** Willhackforfood.biz: free disposable email accounts
] ] ***
] ] "Avoid SPAM *and* protect your privacy at the same time
]
] Stankdawg created this project. Others exists, (like
] dodgeit.com) But they have no has no password protection and
] allowed people to reuse email address. If I know you used
] dodgeit to register for an account somewhere, I can simply
] reuse the email account name and ask the website to reset your
] password. Then I go claim it.
]
] This is a cool idea.

Another site in a similar vein: www.spamgourmet.com

As a side note, the security hole of non-password protected temporary email accounts is interesting, and honestly is not something I had thought of.

Just a note...If you have a hushmail account that is a paid account, you can set up aliases left and right for using when signing up for this or that.

Poor email password protection is a gaping hole in the security side of sites like eBay and PayPal.