[tor-bugs] #9385 [BridgeDB]: bridgedb's email responder should fuzzy match email addresses within time periods
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Aug 6 17:22:23 UTC 2013
#9385: bridgedb's email responder should fuzzy match email addresses within time
periods
-----------------------------------------+----------------------------------
Reporter: isis | Owner: isis
Type: defect | Status: new
Priority: normal | Milestone:
Component: BridgeDB | Version:
Keywords: email,distributor,spam,bots | Parent:
Points: | Actualpoints:
-----------------------------------------+----------------------------------
Comment(by phw):
Interesting. Nice find, isis!
Just for the sake of completeness: the plus sign in GMail addresses is
used to automatically label emails. If I own foo at gmail.com, I can
distribute foo+bar at gmail.com to automatically label all incoming emails
with "bar". So for the
"<static_username>+<incremental_integer>@gmail.com"-attack you mention,
you need '''only a single''' GMail address.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9385#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list