[tor-bugs] #9385 [BridgeDB]: bridgedb's email responder should fuzzy match email addresses within time periods

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Aug 6 17:22:23 UTC 2013


#9385: bridgedb's email responder should fuzzy match email addresses within time
periods
-----------------------------------------+----------------------------------
 Reporter:  isis                         |          Owner:  isis
     Type:  defect                       |         Status:  new 
 Priority:  normal                       |      Milestone:      
Component:  BridgeDB                     |        Version:      
 Keywords:  email,distributor,spam,bots  |         Parent:      
   Points:                               |   Actualpoints:      
-----------------------------------------+----------------------------------

Comment(by phw):

 Interesting. Nice find, isis!

 Just for the sake of completeness: the plus sign in GMail addresses is
 used to automatically label emails. If I own foo at gmail.com, I can
 distribute foo+bar at gmail.com to automatically label all incoming emails
 with "bar". So for the
 "<static_username>+<incremental_integer>@gmail.com"-attack you mention,
 you need '''only a single''' GMail address.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9385#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list