9 ms·
Receiveee.com - disposable email address
- kornnflake 14y agoI used my free time during Christmas and pushed a huge update to my latest weekend hack. It's a disposable email address service. Some of the main features are: * SSL only connections * All data is stored in memory using redis to make the site blazing fast * New mails are instantly displayed using web sockets * Automatically clicking on common activation links * Your inbox doesn't expire
- xoail 14y agoThanks! I will add it to my filters and make sure users dont register through it. ;)
- kornnflake 14y agoGonna add new domains form time to time :p
- 16s 14y agomailinator does this too.
- EwanG 14y agoWhy? It seems like you are escalating a war AGAINST your users. Most folks who use a disposable address are trying to make sure their main address doesn't become a fount of spam. If I continue to visit your site/service, then I will probably decide to "update" my address on my own for the convenience. Am I really being naive?
- duskwuff 14y agoYou are being naive -- it really depends on the service. For trivial online services, a disposable email might be fine, but for anything that costs money, you're doing your users a disservice by letting them register with an email address that they won't be checking (and which could potentially get hijacked, if someone knew the address).
- arscan 14y agoIf a service prevents me from signing up with whatever email address I want, I won't be using it. It's one thing to discourage weak passwords, as that's a common mistake for people that don't know any better. It's another thing altogether to deny signing up with something like this, as they clearly will know the ramifications of doing so.
- jacobn 14y agoI have a website that gives freebies (=$$$) to new signups, so allowing throwaway accounts makes people do things like sign up for 100 accounts. Not giving freebies is of course an option, but then there is goodwill lost on that end instead. It sucks both ways. At least I don't spam my users, but they of course only trust that assertion so far and I certainly don't blame them - there seems to have been a significant rise in email marketing in the last 6+ months - probably some annoying YC startup or two making it much too easy for sites I signed up for at some point but really don't want to hear from send me email... Tsk, tsk ;)
- LiveTheDream 14y agoThen just give the freebies to non-throwaway accounts. Now your users still have a choice, and you don't lose any goodwill (obviously, explain that throwaway accounts don't qualify). This is on the same level as adding a CAPCHA if someone comment looks like spam.
- krichman 14y agoYou might not be naive, but you are probably mistaking the value of allowing sophisticated users to try in this way versus the value of getting an email that you can send weekly updates to.
- aaronpk 14y agoUsing Websockets is a nice touch. However I haven't gotten my tests to work yet. Tried from my Gmail, and also manually SMTPing in.
- kornnflake 14y agoTaking a look into it. My first thought is that some DNS servers are not updated yet :(
- aaronpk 14y agoThe string in my URL is different but very similar to the string in the email address. Curious. 1QdVfTRH vs 1QdVfTS1
- kornnflake 14y agoThat's not your mailaddress in the URL. It's like a password to access the inbox later :)
- aaronpk 14y agoCool, thanks.
- chockablock 14y agoHmm... But why should the 'password' URL be so similar to the mail address. Doesn't this mean that if I know your mail address, I can fairly easily guess the secret URL to let me see that inbox? (Granted that in the most common use case, if I know the email address, I probably know what's in the inbox, since I am likely the person who sent the message. But still, why not make these 2 different random strings?) A couple more examples: 1QjYwHNM vs 1QjYwHOc 1Qk07A9x vs 1Qk07A9X
- nwh 14y agoYeah, the developer is going to want to fix that quick smart. At a complete guess they are two strings being generated in quick succession from the same seed, and they both happen to be very close. End result is that I can guess your email.
- Sami_Lehtinen 14y agoAlso email addresses are in really tight set and easily guessable. So that system should be fixed in general. Not just for address / password issue. But also getting proper address distribution.
- 14y ago
- greenyoda 14y agoThanks, it looks very useful. However, if I want to reuse an address several times, it would be nice to be able to delete individual messages once I've read them.
- harshreality 14y agoYou should append the PositiveSSL CA 2 intermediate certificate to your certificate file. That comodo cert isn't in a few browsers'/systems' certificate stores yet. https://www.ssllabs.com/ssltest/analyze.html?d=receiveee.com https://www.ssllabs.com/ssltest/analyze.html?d=receiveee.com Your nginx configuration ssl ciphersuite list includes single DES, too, when it shouldn't.
- jbellis 14y agohttp://mailinator.com/ http://mailinator.com/ has been around for a while, and allows you to pick your own inbox name, as well as many alternate domains.
- EwanG 14y agoAs well as guerilla mail: https://www.guerrillamail.com/ https://www.guerrillamail.com/ Given some of the other comments in the thread below, it seems like the more of these you have, the more likely one of them will work.
- baddox 14y agoMailinator also has a neat one-way alias, so if you want to use MyName@mailinator.com you can have email sent to an alias mailinator generates like 321randomfoo@mailinator.com. That way, the people (spammers) that get the alias can't even check your inbox, which is still under MyName. http://mailinator.blogspot.com/2008/03/introducing-alternate-inbox-names.html?m=1 http://mailinator.blogspot.com/2008/03/introducing-alternate...
- gm_ 14y agoNote that @mailinator.com email addresses are blocked at a significant number of sites due to its popularity. Throwaway email sites that alternate between several different domains work best.
- StavrosK 14y agoMy favorite disposable email provider, by far, is 33mail.com, mainly because the addresses don't have to be disposable. You give a different email address to each service, and, if you get spam, you know the culprit and can block them right away. Brilliant.
- greenyoda 14y agoYou can do the same with http://spamgourmet.com http://spamgourmet.com.
- StavrosK 14y agoVery nice! I need one that's also a Mozilla Persona provider, maybe I'll write my own one weekend...
- Alex3917 14y agoYou can also just add +domain to the local-part of your email address and do that without needing a disposable email service. Theoretically some sites may strip them out, but I doubt that many go to the trouble.
- bobcattr 14y agoThat only works with gmail.
- rbolkey 14y agoIt does work on gmail, but is definitely not gmail specific. Used to do that trick on my college email account.
- michaelhoffman 14y agoIt works for many mail servers, including Gmail.
- Firehed 14y ago
- dragondilesh 14y agohttp://10minutemail.com/10MinuteMail/index.html http://10minutemail.com/10MinuteMail/index.html is also quite nice.
- goodlook33 14y agoLooks good. I could've sworn there was another one like this. Maybe this is the one, or this one is a newer clone? Like Mailinator, this is a great idea. Kudos to these guys for putting their mail admin skills to good use.
- asimjalis 14y agoOne thing I like about receiveee more than mailinator and 33mail is that you can start using it without signing up. The user interaction is very smooth.
- snprbob86 14y agomailinator does not require signup
- re_todd 14y agoI've been using mailinator for 3-4 years and have never had to sign up.
- goodlook33 14y agoI justn looked at 33mail and they ask for a signup. As re_todd says, mailinator asks for nothing from the user. The accounts are created automatically. Just send mail to some-new-account-foobarbaz@mailinator.com and an account (user) is automatically created. No passwords. No sign in.
- RaphiePS 14y agoNew emails showed up really, really fast. Consider me impressed. Just a minor suggestion: you could wrap the email address in a link prefaced by "mailto:" to make it super easy to test the service.
- DanBC 14y agoThis is interesting; thanks for sharing. It's only useful until websites start filtering out the receivee domain - that's been happening with a few disposable email addresses. And the highlight on " We even automatically click on common activation links for you" was a bit confusing. I was expecting a link to a page about the pointlessness of Challenge Response. And what I really dearly want is an anonymous way to send an email - I don't mind having to sign up; I don't mind having to pay; but I really want a method where sending an email to $Person means they have to work very hard to get my real identity. (This is for good, not bad, reasons. But I can see the potential for abuse.)
- StavrosK 14y agoDoes Mixmeister work still?
- impendia 14y agoRegarding your last point: possibly technical ignorance on my part, but is there some reason signing up for, say, a gmail account doesn't suffice?
- nwh 14y agoA gmail account is tied to your identity, an absolute pain to sign up for, and requires your mobile number.
- cdcarter 14y agoThey don't require mobile numbers, and setting up a throwaway gmail takes about a minute, not tied to your identity at all. You don't even have to click and activation link, if you pass the CAPTCHA. That being said, they certainly have IP logs, so make sure to enable Tor.
- nwh 14y agoThey've enforced mobile numbers for quite a while now, though I suspect that might be country dependant. I can't sign up for an account without one, through my normal or torified IP (I tried several). http://i.imgur.com/l9diG.png http://i.imgur.com/l9diG.png
- artursapek 14y agoIsn't this a great tool for spammers? It even clicks activation links for you?
- Illychnosis 14y agoThis is a great idea: "Your Private Inbox Only you can access this inbox by returning to this web site using the same browser or by saving the link for this page. Others are not able to read your mail." Props to the progger/designer.
- gtklocker 14y agoSome services, like Facebook, normalize the mail address (turn all letters to lower case). Can you make sure that mails to the normalized email also reach my inbox? (They don't now!)
- danellis 14y agoThat would violate at least RFC 2821, which says that the local part must be treated as case sensitive.
- Firehed 14y agoWhat provider doesn't violate that part of the spec? I see plenty of sites/services that uppercase my email address for whatever clever reason they feel is necessary; not violating that part of the spec and actually making the address case-sensitive would be a detriment to the users.
- Cyranix 14y agoIs anyone else seeing the "site's security certificate is not trusted" warning in Chrome?
- deleted 14y ago[deleted]
- jackbauer 14y agosaw it in firefox
- pawannitj 14y agolove this
- surapaneni 14y agohttp://boun.cr http://boun.cr does this already and also allows you to pick your own email.
- jsmeaton 14y agoI'm finding that the secret url is very very close to the actual email addresses in most cases. It's fairly trivial to guess inbox addresses based on email addresses. Is this ideal?
- theone 14y agoThis is really useful. However I missed a link to bookmark the home page. As on going to https://receiveee.com/ https://receiveee.com/ it automatically redirects to newly created address. It is cumbersome to manually add it to bookmark bar.
- laureny 14y agoThe main challenge for these kinds of services is that they're only as useful as they are unknown. If they start getting popular, they either - start getting slammed with volumes of spam that are so high that the creator needs to start paying some serious hosting fees to keep the service running - get blacklisted Mailinator has outlasted all its competitors because it addressed both problems very early on. I wish receiveee best luck but I'm betting that it won't be around in a year from now.
- rgovind 14y agoGreat tool. I would like to ask HN folks opinion on another kind of email service. Its quiet possible that google or yahoo can boot you from their service whenever they want...even if you don't think you violated their TOS. Do you guys think there is room for a service in which, once you signup, you will never be booted from the service? All data will be yours, or after you are gone, it will belong to your descendants. Of course, there are spam considerations here..but I think they have to be worked out.
- vidyesh 14y agoThese are the services I use quite often when I need a disposable email id / fake inbox. http://mailinator.com/ http://mailinator.com/ http://10minutemail.com/10MinuteMail/index.html http://10minutemail.com/10MinuteMail/index.html https://www.guerrillamail.com/ https://www.guerrillamail.com/ http://www.dispostable.com/ http://www.dispostable.com/ http://dudmail.com/ http://dudmail.com/ http://getairmail.com/ http://getairmail.com/ http://mailcatch.com/en/disposable-email http://mailcatch.com/en/disposable-email http://spambox.us/ http://spambox.us/ http://www.yopmail.com/en/ http://www.yopmail.com/en/ https://ssl.trashmail.net/ https://ssl.trashmail.net/ http://www.fakeinbox.com/ http://www.fakeinbox.com/ http://www.fakemailgenerator.com/ http://www.fakemailgenerator.com/ http://www.tempinbox.com/ http://www.tempinbox.com/ If I am really paranoid or just on tor then I use http://tormail.net/ http://tormail.net/ Now adding https://receiveee.com/ https://receiveee.com/ One of the reasons why I have a list of all these disposable email services is because some do get blocked from websites. Eg. mailinator : I loved the service but its mostly blocked everywhere now. ( I know there are alt domains for mailinator ) Really appreciate all these services.
- rubergly 14y agoWhich is your favorite? This is a great list, but hard to pick out the best from just reading all of these sites.
- vidyesh 14y agoFirst choice is http://mailinator.com/ http://mailinator.com/ If its blocked then, these surely do the job http://10minutemail.com/10MinuteMail/index.html http://10minutemail.com/10MinuteMail/index.html https://www.guerrillamail.com/ https://www.guerrillamail.com/ http://www.dispostable.com/ http://www.dispostable.com/ When on tor, tormail.net
- megablast 14y agoMailinator adds a new host every so often. It shows you the new host as an image, to make it a bit harder for websites to block it.
- bredren 14y agohttps://gli.ph https://gli.ph Cloaked Email is more convenient than these services and can offer you the same or better privacy. receiveee looks great for incoming one-time emails like spam and confirmation emails. Gliph allows two-way email, at the cost of having to create an account. The cloak address you generate on Gliph forwards mail to your real inbox. when you reply it appears to come from an cloak address. More info in ReadWrite article: http://readwrite.com/2012/08/14/use-this-app-to-create-anonymous-disposable-email-addresses http://readwrite.com/2012/08/14/use-this-app-to-create-anony... Gliph also sets you up with a secure picture messaging tool for iOS and Android and a serious privacy policy. Disclosure: I am co-founder and ceo of Gliph. Happy to answer questions.
- tomjen3 14y agoDoes anybody else get a certificate error (it claims that it has been signed by an unknown key).
- apathetic 14y agoI tested it from both my gmail and outlook.com account. I instantly received the e-mail from gmail but from hotmail I never received the test e-mails I sent.
- wallzz 14y agocan't we send emails using the same service ?
- dools 14y agoFor anyone wanting to stop signups from disposable email addresses I've found this service to be really good: http://www.block-disposable-email.com http://www.block-disposable-email.com has a massive database and a bounty for new additions! We have 2 factor verification for http://8centsms.com/ http://8centsms.com/ but with the advent of disposable inbound SMS numbers via Twilio as well as disposable email addresses we were getting a bunch of people signing up and getting the free 10 credits repeatedly. We haven't seen the problem recur since implementing this service, though so it seems the coverage is pretty good (/me prepares for onslaught of fake email signups to get the 10 free SMS credits via fake Twilio numbers ... ) All we need now is a service to blacklist disposable mobile numbers!!
- antr 14y agoI use disposable emails only to signup to services. I later save the email and pwd with 1Password. I've been doing this for a long time. The reason I do this is because many startups (and non-startups) keep abusing on the amount of email they send you, even if I unsubscribe from their "newsletter" they come up with other non-newsletter emails - and this is just unbearable. I feel like being spammed most of the time. The advantage of using disposable email is that I have access to the service, I decide when I receive emails and it's a great way to protect my account from being hacked (think of any recent social eng hack a la Amazon, Apple, etc. they couln't do it without your signin email). A handful of other colleagues do the same thing. If you blacklist users who want to protect their privacy and want control over their inbox all you are doing is blocking (in our case) affluent users.
- Gormo 14y agoMany email services offer disposable addresses integrated with your real email account. Yahoo in particular has an excellent system for doing this; you can generate disposable addresses by adding a unique string to a base name particular to your account (but which isn't identical to your real address, as it is if you use a '+' delimiter with Gmail). By default, all messages received at any disposable address go to your primary inbox, but you can designate an alternate folder for each of them. Since all of your disposable addresses are @yahoo.com, it's impossible for admins to blacklist the domain. Sorry if this sounds like a commercial for Yahoo Mail; I'm just very happy with this feature and almost never resort to using Mailinator et al.
- electrotype 14y agoI used to use services like this, but now I simply have a gmail account dedicated to hit and run emails. I only go to this account inbox when I'm looking for a particular email. It's full of spam and I don't care!
- mike-cardwell 14y agoYour site seems to display any arbitrary html sent via email. So it will load flash, javascript, honour meta redirects to other sites, etc. Try running it through https://emailprivacytester.com/ https://emailprivacytester.com/ E.g: https://receiveee.com/1QQGEpdt/908 https://receiveee.com/1QQGEpdt/908
- kornnflake 14y agoThanks for the hint! Already fixed most of these attacks and looking forward to fix them all. Btw: This fix only applies to new mails.
- josscrowcroft 14y agoQuestion for business owners/founders: how do you feel about people signing up for your services with these throwaway email addresses? On the one hand, I respect people's privacy and right to use whatever email address they like. On the other (more relevant) hand - I sometimes need to contact users who violate terms and conditions that their access may be switched off (I'd never do this without contacting them 2-3 times). Also, I might need to inform them that something has changed which might affect their usage. My service can be quite integral to a lot of apps, so to me that's an important feature... Thoughts?
- pi18n 14y agoI'd be fine if people signed up with these to try it, but they should use a permanent address if they want to continue using it. I would have no sympathy at all if they lost their account.
- josscrowcroft 14y agoFair play. I suppose the key thing is I've been able to strike up some really good relationships with users and customers by knowing their email addresses - but clearly users of throwaway email accounts aren't going to be open to that kind of communication anyway. Mainly I've noticed a distinct correlation between spam signups/service abusers and throwaway email accounts.
- peterhost 14y agoThoughts ? Well, ...We (supposedly) live in a free country. Analogy: When one fucks his/her neighbor's wife/husband (no, just kidding, nobody ever does that IRL), one at least draws the curtains, or goes rent a motel room 500 miles from home. It can lead to legal problems, big loss of money, and shattering a whole family (hurting real people for real), but no jurisdiction in north america or western Europe would sent someone to jail for that. So... Signing into your new shiny service with a dupe email ? You bet i will. All the more if it's free. And that's just the beginning. It's time people realize their "profile" is as private as their "privates". Don't let anyone profile you for free. Your profile is worth more than that, right ? That answers your question ? (Btw nothing personal, as for the "illegal" stuff hapening on your service, it's mostly your problem, alas:( and that's not the easiest part. As long as you wish to profile users, you cannot securely (as in security by design) offer them privacy, and hence will run into the kind of troubles you allude to)
- wangweij 14y agoIs this service really safe? It shows me a page with URL like https://receiveee.com/123456WC https://receiveee.com/123456WC, and an email address of 123456XM@mailseal.de, so only the last two letters are different. Now once my email is sent and the address made public, isn't it very easy for someone to find out the page?
- mosselman 14y agoNice site. Only I am afraid that I will forget the amount of 'e's at the end :).
- tunetosuraj 14y agoIt's a flawed system. If I give my email for ex: XXXXXX@receiveee.com to someone.. They can practically view my inbox by going to receiveee.com/XXXXXX
- LandoCalrissian 14y agohttp://www.tempomail.fr/ http://www.tempomail.fr/ is what I have been using for a very long time. You can have it redirect to your normal e-mail address and there is a nice chrome plugin for it too.
- 3825 14y agoI have a google apps account which runs something like administrator@example.com I put their domain www.suspiciousvendor.com@example.com as my email address when I sign up. I get all emails sent to *@example.com in the google mail archive folder and I can search if I need to Too bad google discontinued the free option.