[kwlug-disc] So I was auditing my accounts online and thought of something.

Chamunks chamunks at gmail.com
Sun Dec 17 17:57:16 EST 2017


I was heavily inspired to look into something like this trying to find ways
to obfuscate linkages between accounts. Gmail works fine filtering spam but
my problem is keeping my data when it's leaked by other entities from
helping spammers build profiles.  I don't worry about data leaks on sites
because I never recycle passwords so that's not an issue but if the website
has personally identifiable information then I start to become linked from
site to site.

I have this thought that if the website doesn't ever need money from me and
even in most cases when they do.  They will never need my real identity nor
should they get it. So having a fake random alias for each site is also
probably equally beneficial.

Now to my direct responses.

The idea is something like Mailinator where you can use a heap of
registered domains but be a bit less prone to being blocked by online
service providers by not just being an open door system.

The problem that I see with Mailinator is anyone can just open your inbox
at any point given they know your email.

Runbox style catch all addresses could work but it's a single domain which
is probably hosted by one person and likely used by very few people.  This
doesn't provide very good obfuscation.

Fakenamegenerator.com does kind of do this but again requires no sign up
and provides no ownership of the identities generated.

On Sun, Dec 17, 2017, 2:08 PM Andrew Stevanus (KWLUG)
<andrew+kwlug at hoot.tech> wrote:

> (Resending this since a lot of people probably didn't see it due to
> being marked as spam last time.)
>
> There's an extension for Firefox called "Bloody Vikings!" which
> essentially automates this process through a menu in your browser. I
> haven't used it myself, but it looks interesting. Mailinator is one of
> the services they support, but there are others as well.
>
> On 2017-12-17 12:30 AM, Bob Jonkman wrote:
> > There are existing services that do something similar. I've used
> > https://mailinator.com but their domain is often blocked by sites that
> > require registration. They do have a bunch of donated MX domains that
> > point to their service, in an effort to obfuscate their domain name.
> >
> > --Bob.
> >
> >
> > On 2017-12-16 10:47 PM, Keefer Rourke wrote:
> >> What you're describing sounds a lot like a catch-all or wildcard
> >> email address. You can set this up easily if you own a domain with
> >> MX records and use a host such as Runbox for example
> >> (https://runbox.com). They at least have some help docs and
> >> tutorials [1].
> >
> >> How would this be different exactly? You could for instance use a
> >> vanity domain that isn't directly identifiable to you (set up whois
> >> guard or whatever) and just specify whatever string you want on the
> >> local part of the email address.
> >
> >> So if you own the imaginary domain foobar.bazz, then
> >> facecreep at foobar.bazz, tweeter at foobar.bazz,
> >> grubleminus at foobar.bazz, etc can specified as your account details,
> >> and all incoming mail to those addresses is "caught" by your
> >> wildcard address. Of course this might invite unwanted spam,
> >> SpamAssassin is usually good enough, and a good mail host will let
> >> you configure filters.
> >
> >> [1] https://help.runbox.com/catch-all/
> >
> >> - Keefer, who hopes this helps in place of such a yet-to-exist
> >> mail-service
> >
> >> On December 16, 2017 10:22:10 PM EST, Chamunks <chamunks at gmail.com>
> >> wrote:
> >>> What about making an email provider that you log in with a 12
> >>> English word seed and a password.  The word seed would result in
> >>> you having possibly tens if not hundreds of disposable email
> >>> addresses for only incoming mail.
> >>>
> >>> The point of this technology would be so that you could use any
> >>> of these email addresses for signing up for online services where
> >>> you don't want them to have your email address.
> >>>
> >>> Just thinking about ways to make social graphing more difficult
> >>> for those who are taking your privacy for no value added.
> >>>
> >>> Maybe as a premium service to help support the website you could
> >>> sell SMTP/POP3 access so that you could respond to people.  Maybe
> >>> you could send a message or two outgoing here and there in case
> >>> you needed to resolve something to do with your account or talk
> >>> to support but otherwise spam could be a real problem with this
> >>> provider without precautions like this.
> >
> >
> >
> >> _______________________________________________ kwlug-disc mailing
> >> list kwlug-disc at kwlug.org
> >> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> >
> >
> >
> > _______________________________________________
> > kwlug-disc mailing list
> > kwlug-disc at kwlug.org
> > http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> >
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20171217/6f40c668/attachment.htm>


More information about the kwlug-disc mailing list