this post was submitted on 01 Apr 2025
880 points (99.4% liked)

Technology

69298 readers
4081 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

A self-proclaimed data enthusiast calling themselves ‘ThinkingOne’ has made a huge database containing 201 million pieces of user data from X freely available. The data is said to have come from two previous leaks and includes email addresses, locations and profile data of users of the social media platform.

you are viewing a single comment's thread
view the rest of the comments
[–] mbirth@lemmy.ml 198 points 3 weeks ago (33 children)

This vulnerability made it possible to collect user data simply by knowing someone’s email address or phone number.

Another example of where it pays off to have separate email addresses/aliases for every website/service you use.

[–] joshchandra@midwest.social 12 points 3 weeks ago (24 children)

Wait, so you literally have hundreds of accounts? How do you manage them all?

[–] CatZoomies@lemmy.world 18 points 3 weeks ago* (last edited 3 weeks ago) (8 children)

This is what I do as well. I purchased my own custom domain name and run aliases off it using Addy. So as an example, an email for an online account would look like: random9.words@mycustomemail.com

Then I feed these accounts into a password manager so I don’t have to remember them.

All the aliases forward mail directly to my main inbox. Companies never see what my real address is. If I get spam, I know which company either sold my data or leaked my data. I can then take action by simply turning off that email alias and then spinning up a new one.

The best thing about owning your custom domain is that you’re in control and never have to change your email addresses. If I want to move to a new email provider, I can easily do that. The process, simplified:

  • Buy a domain name
  • Sign up for an email account at Tuta, Mailbox, etc.
  • Set up your custom domain at that provider.
  • Go to your Domain provider and update your MX records so that it syncs with the email provider.
  • if you want to switch email providers, get a new one and then update your MX records to point to the new provider.
  • If you updated your records to point to the new provider, you’re done. It’s that simple. You won’t miss an email.

Edit: All providers make it very simple to set up a custom domain. If you can follow instructions and copy and paste text, their systems will run checks to make sure you did it correctly and it’s syncing properly. Very easy for those who aren’t technical.

[–] max_dryzen@mander.xyz 1 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

wouldn't profilers simply track via the domain tld instead of the whole address...shopping1 at uniquedomain, bank2 at uniquedomain , etc

and in the case of aliasing, couldnt a domain provider tell where the aliases rout to and sell that info as a side earner?

[–] CatZoomies@lemmy.world 1 points 3 weeks ago

Great questions! Seriously, those made me think for sure.

For question one, I suppose a profiler could do that. If my domain name is myemaildomain.com, they probably could track all emails and sell it collectively. But I don’t think corporations do that at this time. That would be akin to profiling all Hotmail, Gmail, Live, etc emails, appreciating those are massive services. I suppose if nefarious actors were to do that to my domain, I could consider switching domains - I have multiple domain names I own, and it’d be trivial to use the other ones. In the years I’ve been using a custom domain for email, I haven’t encountered any nefarious actors and have significantly eliminated any spam.

For question two, the domain provider I use doesn’t do that in their terms of service. However, if they did look at my MX records and decided they wanted to profile me as a user of Addy, they definitely could do that. Though it would hurt their business as many users would migrate their domains to new registrars - I certainly would move my domains to a new registrar!

load more comments (6 replies)
load more comments (21 replies)
load more comments (29 replies)