824
The Internet Archive is under attack, with a popup claiming a ‘catastrophic’ breach
(www.theverge.com)
this post was submitted on 09 Oct 2024
824 points (99.9% liked)
Technology
59378 readers
3600 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I recently went through most of my accounts and randomized the username, with the thought here being to limit the likelihood of one site being compromised leading to accounts at other sites being compromised. I don't have to remember them due to using a password manager, so it's really no skin off my nose.
I'll use this as a reminder to everyone to improve your security. Some ideas:
Sucks that people are targeting IA, I hope there isn't any lasting damage and that this is a simple defacement/DOS.
For e-mails, you can just get firefox relay with your own subdomain and generate infinite e-mail masks for 1$ a month. I usually take "[email protected]" for example. It's pretty great because you just make the masks on the fly.
What about plus addressing which is supported by most major mail services for free? You can just use [email protected] for example.
I didn't know that actually. They can still deduce your actual email address from that, but for the identification of the culprit that would work as well.
For users of Gmail, I can confirm this works and you can even set it up so that address+nameofshop goes to a folder called "nameofshop."
You can also apparently add a dot anywhere before @gmail.com and still receive the email. I haven't tried this one, but the last time I mentioned this someone said it was part of the email standard, so presumably it works.
I don't know of tricks specifically of this vein for proton mail, but I do know you can setup a catch-all address so, for example, something addressed to [email protected] goes instead to [email protected].
I've not tried SimpleLogin, but apparently it offers similar functionality.
can confirm, [email protected] works just the same as [email protected]
I've been doing this for several years now (not specifically that service, since I have my own domains). It's really nice knowing exactly who sold your email to the spam bots, because it's right in the address. Super easy to block once that happens.
addy.io is another service which I'm using with my own domain. I know there exists a third, but I can't remember the name.
The email mask is free without a subdomain. I use it for the odd random signups where the only thing I'm really interested in is not having another nobhead add me to their spam lists.
That's how I used it initially as well, but chose to get a subdomain to identify shops and services that had data breaches/leaks, pass on the email to other shops and services, etc.
And then I can just block that mask.
Yup.
If you use the same email everywhere, they can try brute-forcing the password by using the email instead of your username. Give them less to go on. $1/month is absolutely worth it to prevent an important account from getting hacked.