The same threat actor has leaked larger amounts of data from LinkedIn dated 2023. They claim this new data contains 35M lines and is 12 GB uncompressed.

  • uranibaba@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    8 months ago

    I have a set it up so that any email sent to unknown users on my domain gets redirected to email. If you send an email to bad_address@example.com and my real email is uranibaba@example.com, I will still receive the email.

    Now this is great because I will just use name_of_service@example.com and still get the email. If the email is leaked, I will know where it came from.

    • elscallr@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      8 months ago

      Owning your own domain is great that way. Even makes the little bit I pay to ProtonMail well worth it. There are a few addresses I have dedicated, like my [email protected], me@, and my-name@, but the rest just go to a catch all. It’s fantastic.

      • uranibaba@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        8 months ago

        My mail is hosted by my domain host but I am considering switching to Proton. Have you done such a move?

        • Illiterate Domine@infosec.pub
          link
          fedilink
          English
          arrow-up
          2
          ·
          8 months ago

          I made that move and had no issues. You can copy/paste your way through DNS setup and the rest is just configuring your proton account how you want.

          You’ll want to be familiar with proton and some of the tradeoffs in its privacy model, but it’s most likely more feature-full than a hosting provider. Dreamhost, for one, is quite basic.

    • Cosmic Cleric@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      8 months ago

      Be careful, my domain got on a whole bunch of ISP’s spam lists because I had done the same thing.

      They really don’t like open domain email working.

      • Styxia@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        8 months ago

        That’s annoying! It’s not been my experience, out of curiosity do you have any theories why your domain/aliases got blocked?

        • Cosmic Cleric@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          8 months ago

          out of curiosity do you have any theories why your domain/aliases got blocked?

          For my domain it was put on a spam list that various ISPs use.

          When I spoke with one ISP they said it’s because I had an open email address situation going, where a spammer can send a spam email out to a third party and on the reply address to they can make up anything as an email address for my domain name and it would be ‘valid’ because my domain email server was set up to receive all emails that you described.

          And because of that I got put on a global spam list which many ISPs use. At the time I didn’t even know about my domain being on the list, I just noticed a big drop in emails I was receiving.

          FYI this happened over a decade ago, so I do not know if that is the current practice today. But better to make sure any email addresses to your domain that is not valid does not go through. No “catch all” bucket situation.

          • chaospatterns@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            edit-2
            8 months ago

            That’s not because you have a wildcard. That’s because you need to implement DKIM, DMARC, and SPF records to prevent others from using your domain name to send mail.

            MTAs use those standards to verify if somebody is permitted to send email for your domain. If you don’t have those set then you can get what that ISP described.

            • Cosmic Cleric@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              8 months ago

              That’s because you need to implement DKIM, DMARC, and SPF records to prevent others from using your domain name to send mail.

              Well I used a third party service to host my domain, and as far as I can remember (like I said this was over a decade ago, maybe almost two decades), everything was set up correctly at that time.

              Not trying to dispute what you said, but I can at least speak towards that as far as we knew at the time we had the domain set up correctly on our end, the stuff we could control.

              The only thing is we had a catch-all bucket setting turned on for emails to be forwarded to an internal email address of our domain.

              • bane_killgrind@lemmy.ml
                link
                fedilink
                English
                arrow-up
                1
                ·
                8 months ago

                There has never been a correct way to deploy these services, just increasingly complex, featurefull, and or secure ways to do it

                • Cosmic Cleric@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  arrow-down
                  1
                  ·
                  8 months ago

                  There has never been a correct way to deploy these services, just increasingly complex, featurefull, and or secure ways to do it

                  You forgot one way.