Deleteduser.com – A $15 PII Magnet

(mike-sheward.medium.com)

2 points | by p4bl0 8 hours ago ago

2 comments

  • p4bl0 8 hours ago

    Using an actual valid domain name for this seems crazy to me. Or, if your database system enforce the use of a valid domain name, why not use a randomly generated subdomain of a domain in your control? Something like login@RANDOMSTRING.deleteduser.yourcompany.tld is also searchable if needed and does the same thing.

  • turtleyacht 8 hours ago

    Once paths are network addressable, ://dev/null could work similarly.