Mark Trickett <[email protected]>
writes:

> On Tue, 2013-05-14 at 09:42 +1000, Trent W. Buck wrote:
>
>> gmail and hotmail also support subaddresses.
>> 
>> I hear gmail also drops dots in the LHS, so x.y.z and xyz and xy.z all
>> go to the same account -- this could be leveraged for the same purpose.
>
> And this bites me. There is someone else out there who uses my Gmail
> email address, but with a dot between the first and second names

Indeed; I heard about this because it was used to attack amazon, by
claiming your object never arrived and asking for it to be resent to
<dead drop> instead because "you" are out of town this week.  Apparently
amazon doesn't check very hard that you're you.

(I didn't quite understand how that attack works, since it seems to me
you'd want *amazon* to treat x.y and xy as the same, and gmail to treat
them as different.  Shrug.)

_______________________________________________
luv-main mailing list
[email protected]
http://lists.luv.asn.au/listinfo/luv-main

Reply via email to