6 ms·
I used my free time during Christmas and pushed a huge update to my latest weekend hack. It's a disposable email address service. Some of the main features are
by kornnflake 14y ago
I used my free time during Christmas and pushed a huge update to my latest weekend hack. It's a disposable email address service.
Some of the main features are:
* SSL only connections
* All data is stored in memory using redis to make the site blazing fast
* New mails are instantly displayed using web sockets
* Automatically clicking on common activation links
* Your inbox doesn't expire
- xoail 14y agoThanks! I will add it to my filters and make sure users dont register through it. ;)
- kornnflake 14y agoGonna add new domains form time to time :p
- 16s 14y agomailinator does this too.
- EwanG 14y agoWhy? It seems like you are escalating a war AGAINST your users. Most folks who use a disposable address are trying to make sure their main address doesn't become a fount of spam. If I continue to visit your site/service, then I will probably decide to "update" my address on my own for the convenience. Am I really being naive?
- duskwuff 14y agoYou are being naive -- it really depends on the service. For trivial online services, a disposable email might be fine, but for anything that costs money, you're doing your users a disservice by letting them register with an email address that they won't be checking (and which could potentially get hijacked, if someone knew the address).
- arscan 14y agoIf a service prevents me from signing up with whatever email address I want, I won't be using it. It's one thing to discourage weak passwords, as that's a common mistake for people that don't know any better. It's another thing altogether to deny signing up with something like this, as they clearly will know the ramifications of doing so.
- jacobn 14y agoI have a website that gives freebies (=$$$) to new signups, so allowing throwaway accounts makes people do things like sign up for 100 accounts. Not giving freebies is of course an option, but then there is goodwill lost on that end instead. It sucks both ways. At least I don't spam my users, but they of course only trust that assertion so far and I certainly don't blame them - there seems to have been a significant rise in email marketing in the last 6+ months - probably some annoying YC startup or two making it much too easy for sites I signed up for at some point but really don't want to hear from send me email... Tsk, tsk ;)
- LiveTheDream 14y agoThen just give the freebies to non-throwaway accounts. Now your users still have a choice, and you don't lose any goodwill (obviously, explain that throwaway accounts don't qualify). This is on the same level as adding a CAPCHA if someone comment looks like spam.
- krichman 14y agoYou might not be naive, but you are probably mistaking the value of allowing sophisticated users to try in this way versus the value of getting an email that you can send weekly updates to.
- aaronpk 14y agoUsing Websockets is a nice touch. However I haven't gotten my tests to work yet. Tried from my Gmail, and also manually SMTPing in.
- kornnflake 14y agoTaking a look into it. My first thought is that some DNS servers are not updated yet :(
- aaronpk 14y agoThe string in my URL is different but very similar to the string in the email address. Curious. 1QdVfTRH vs 1QdVfTS1
- kornnflake 14y agoThat's not your mailaddress in the URL. It's like a password to access the inbox later :)
- aaronpk 14y agoCool, thanks.
- chockablock 14y agoHmm... But why should the 'password' URL be so similar to the mail address. Doesn't this mean that if I know your mail address, I can fairly easily guess the secret URL to let me see that inbox? (Granted that in the most common use case, if I know the email address, I probably know what's in the inbox, since I am likely the person who sent the message. But still, why not make these 2 different random strings?) A couple more examples: 1QjYwHNM vs 1QjYwHOc 1Qk07A9x vs 1Qk07A9X
- nwh 14y agoYeah, the developer is going to want to fix that quick smart. At a complete guess they are two strings being generated in quick succession from the same seed, and they both happen to be very close. End result is that I can guess your email.
- Sami_Lehtinen 14y agoAlso email addresses are in really tight set and easily guessable. So that system should be fixed in general. Not just for address / password issue. But also getting proper address distribution.
- 14y ago
- greenyoda 14y agoThanks, it looks very useful. However, if I want to reuse an address several times, it would be nice to be able to delete individual messages once I've read them.
- harshreality 14y agoYou should append the PositiveSSL CA 2 intermediate certificate to your certificate file. That comodo cert isn't in a few browsers'/systems' certificate stores yet. https://www.ssllabs.com/ssltest/analyze.html?d=receiveee.com https://www.ssllabs.com/ssltest/analyze.html?d=receiveee.com Your nginx configuration ssl ciphersuite list includes single DES, too, when it shouldn't.