Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You're underestimating email. People reuse their email address, so it's not as benign as you think.

Just googling someone's email is a start. But worse actors can find your email on a combolist or figure out what other services you use. Just knowing someone's email is the first step to social engineering a customer service backdoor, for example.

AppleID specifically helps users avoid all this with trivial per-app email address generation, and that's something our tools should have given us a decade ago.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: