$7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite
How One GraphQL Query Turned Private Invites into Public Data Leaks
[Continue reading on InfoSec Write-ups »](https://infosecwrite … ⌘ Read more
How a Welcome Email Can Be Used for Malicious Redirection
Free Article Link: Click for free!
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-a-welcome-email-can-be-used-for-malicious-redirection-fd833ec71550? … ⌘ Read more
**Header Injection to Hero: How I Hijacked Emails and Made the Server Sing **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/header-injection-to-hero-how-i-hijacked-emails-an … ⌘ Read more
**Silent but Deadly: How Blind XSS in Email Notifications Gave Me Root Alerts **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/silent-but-deadly-how-blind-xss-in-email … ⌘ Read more
Where is “Hide My Email” on iPhone & iPad?
The “Hide My Email” feature on iPhone is incredibly useful, allowing you to create random unique email addresses that forward to your real email address inbox. This feature can help protect your privacy by allowing you to sign up for apps or services without sharing your real email address, while enhancing security from phishing attempts, … Read More ⌘ Read more
Where is “Hide My Email” on iPhone & iPad?
The “Hide My Email” feature on iPhone is incredibly useful, allowing you to create random unique email addresses that forward to your real email address inbox. This feature can help protect your privacy by allowing you to sign up for apps or services without sharing your real email address, while enhancing security from phishing attempts, … Read More ⌘ Read more
E-COM: the $40 million USPS project to send email on paper
How do you get email to the folks without computers? What if the Post Office printed out email, stamped it, dropped it in folks’ mailboxes along with the rest of their mail, and saved the USPS once and for all? And so in 1982 E-COM was born—and, inadvertently, helped coin the term “e-mail.” ↫ Justin Duke The implementation of E-COM was awesome. You’d enter the messages on your computer, send it to the post office usi … ⌘ Read more
VPS troubles and the weekend
This weekend I went to the cottage with P on Friday. I hoped I would
have a nice weekend reading in front of the wood stove, but I had also
planned to spend at least a few hours trying to configure Maddy as the
new mail server for hack.org et al.
Then the web server I moved to the new VPS died. Again. I connected to
the VNC console and, like before, the Linux kernel couldn’t find its
root disk. A simple:
# mount /dev/vda2 /sysroot; exit
in the emergency shell solved thi … ⌘ Read more
↳
In-reply-to
»
My main domain name turned 24 years old today. That feels weird.
⤋ Read More
@prologic@twtxt.net I will pull the email. The year is about right.
↳
In-reply-to
»
My main domain name turned 24 years old today. That feels weird.
⤋ Read More
According to a very old email one of my more personal family domains was registered in 2013 making it 12 years old, so I was closed 🤣 my public facing one is much much older 🤣
$100 Bounty: How a Spoofed Email Could Change Any Username on HackerOne
A simple email spoofing trick could let anyone hijack your HackerOne username and profile link
[Continue reading on InfoSec Write-ups »] … ⌘ Read more
↳
In-reply-to
»
The original twt is unavailable. It may have been edited or deleted, or is from an unknown or muted feed.
⤋ Read More
@ About the URL, since it no longer used for hashing there might be no need to change it. I agree that we keep all the parts that already are out there for the most parts. Instead of a contact field you could also just use links like: link = Email mailto:user@example.dk or link = Signal https://signal.me/sthF4raI5Lg_ybpJwB1sOptDla4oU7p[...]
↳
In-reply-to
»
The original twt is unavailable. It may have been edited or deleted, or is from an unknown or muted feed.
⤋ Read More
@andros@twtxt.andros.dev Thanks for consolidating a lot of good ideas. Especially how you have deiced to just extend the mention syntax for location-based treads. This might even be backward compatible with older (pre-yarn) clients.
What about using Z for UTC +00:00- is that allowed in your specs?
Regarding url = I would suggest to only allow one and the maybe add url_old = or url_alt = !?
I’m still not a fan of a DM feature, even thou it helps that i have now been split out into a separate feed file. Instead if would suggest a contact = field for where people can put an email or other id/link for an established chat protocol like signal or matrix.
The Ultimate Guide to Email Input Field Vulnerability Testing
Real-world methods and payloads for testing email field security
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/the-ultimate-guide-to-email- … ⌘ Read more
$3750 Bounty: Account Creation with Invalid Email Addresses
How a Simple Email Validation Flaw Earned a $3,750 Bounty
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/3750-bounty-account-creation-with-invalid-em … ⌘ Read more
↳
In-reply-to
»
Finally I propose that we increase the Twt Hash length from
⤋ Read More
7 to 12 and use the first 12 characters of the base32 encoded blake2b hash. This will solve two problems, the fact that all hashes today either end in q or a (oops) 😅 And increasing the Twt Hash size will ensure that we never run into the chance of collision for ions to come. Chances of a 50% collision with 64 bits / 12 characters is roughly ~12.44B Twts. That ought to be enough! -- I also propose that we modify all our clients and make this change from the 1st July 2025, which will be Yarn.social's 5th birthday and 5 years since I started this whole project and endeavour! 😱 #Twtxt #Update
I also fundamentally do not believe in the notion that Twtxt should be readable and writable by humans. We’ve thrown this “argument” around in support of some of the proposals, and I just don’t buy it (sorry). As an analogy, nobody writes Email by hand and transmits them to mail servers vai SMTP by hand. We use tools to do this. Twtxt/Yarn should be the same IMO.
**WooCommerce Users Beware: Fake Patch Phishing Campaign Unleashes Site Backdoors **
Imagine this: you’re running your WooCommerce store, sipping coffee ☕, and an urgent email lands in your inbox. It scr … ⌘ Read more
Just like we don’t write emails by hand anymore (See: #a3adoka), we don’t manually write Twts or update our twtxt.txt feeds. Instead, we use modern Twtxt clients that conform to the specifications at Twtxt.dev for a seamless, automated experience. #Twtxt #Twt #UserExperience
Nobody writes emails by hand using RFC 5322 anymore, nor do we manually send them through telnet and SMTP commands. The days of crafting emails in raw format and dialing into servers are long gone. Modern email clients and services handle it all seamlessly in the background, making email easier than ever to send and receive—without needing to understand the protocols or formats behind it! #Email #SMTP #RFC #Automation
Hidden Tricks to Spot Phishing Emails Before They Trick You!
Phishing emails are like traps set by cybercriminals to trick you into sharing personal details, clicking dangerous links, or downloading…
[Continue reading on InfoSec Write-ups … ⌘ Read more
Email Verification Bypass during Account Creation | Insecure Design ⌘ Read more
Synology confirms that higher-end NAS products will require its branded drives
“Synology-branded drives will be needed for use in the newly announced Plus series, with plans to update the Product Compatibility List as additional drives can be thoroughly vetted in Synology systems,” a Synology representative told Ars by email. “Extensive internal testing has shown that drives that follow a rigorous validation process when paired with Synology systems are … ⌘ Read more
↳
In-reply-to
»
guys i may be stupid. i confused IRC bouncer with IRC server
⤋ Read More
@kat@yarn.girlonthemoon.xyz is there anything i can even run or is this like email where you should just use libera and shut up
Google Gemini Advanced & 2TB Storage Free for Students
Google is offering their Gemini Advanced AI model for free to students, along with 2TB of free storage. This is a limited time offer where students must sign up by June 30, 2025. Students will need a valid .edu email address to be able to signup for the deal. Google says you can use Gemini … Read More ⌘ Read more
4Chan Hack Reveals University Professor Moderators, 10 Million Bans, 10 Year Old Software
Hack of 4Chan was carried out by users of a competing image message board which published 4Chan source code, staff emails, & more. ⌘ Read more
↳
In-reply-to
»
The original twt is unavailable. It may have been edited or deleted, or is from an unknown or muted feed.
⤋ Read More
@andros@twtxt.andros.dev how often do you send a private message on the Fediverse? How often do you send PGP/SMIME encrypted emails? Are there other tools that are more suitable for the task? If implementing direct/private messages on twtxt scratches an itch (you know, that hobbyist itch we all get from time to time), then don’t give up so easily. Worse comes to worse, and your feed becomes too noisy, people can simply unfollow/mute.
I really don’t care about direct messages here, but I might be on that bottom 1%!
Gmail Showing 1 Unread Message? Here’s How to Find It
If you’re the type of person who likes to maintain Inbox Zero, or who recently went and tidied up their Gmail inbox to get every email marked as read, you may come across a frustrating situation where Gmail shows 1 unread message, and you simply can’t locate that unread email message in Gmail. If you … Read More ⌘ Read more
How to Spot a Phishing Email in 5 Seconds (Real Examples)
And What to Do When Your Smart Home and a Stalker’s AirTag Team Up Against You
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-to-spot-a-phishing-email-in-5-second … ⌘ Read more
guys omg the people behind pico.sh are so nice ;_; one of the people running it emailed me to let me know i had what was likely a malfunctioning (or well, not working as intended) script that was spawning the same SSH tunnel over and over and they wanted to give me a heads up.
and i felt SO BAD because i worried i was straining their service or something so i disabled my 4 tunnels (they were serving little SSH games and services) and got back to them.
but i just woke up to THE NICEST EMAIL EVER reassuring me that i was actually using it as intended, it was just my script that was having problems, and they even said that if it was intended to work that way it was fine and they just wanted to let me know!
so i restarted the tunnels but have since added lockfiles as safeguards so that when the script is run it’ll check if it’s already running :D
Leaked Email from Red Hat CEO: DEI, Supplier Diversity Requirements Removed
In an email to Red Hat (IBM) employees, leaked to The Lunduke Journal, CEO Matt Hicks outlines where DEl is to be removed within the company. ⌘ Read more
How to Turn Off Mail Categories on iPad
The Mail app for iPad has been updated to include the Mail Categories feature with iPadOS 18.4. The Mail Categories feature is intended to automatically sort your email inbox within the Mail app into particular email categories, including “Primary”, “Transactions”, “Updates”, and “Promotions”, along with a mostly hidden “All Mail” option. While the intention may … Read More ⌘ Read more
MacOS Sequoia 15.4 Update Released with Mail Categorization, New Emoji
MacOS Sequoia 15.4 has been released for Mac users running the Sequoia operating system. The software update includes some new features and refinements, as well as resolutions to various bugs and security patches. For new features, MacOS Sequoia 15.4 gains the Mail Categorization feature that automatically sorts your email inbox for you that has been … [Read More](https://osxdaily.com/2025/03/31/macos-sequoia-15-4-update-downloa … ⌘ Read more
MacOS Sequoia 15.4 Update Released with Mail Categorization, New Emoji
MacOS Sequoia 15.4 has been released for Mac users running the Sequoia operating system. The software update includes some new features and refinements, as well as resolutions to various bugs and security patches. For new features, MacOS Sequoia 15.4 gains the Mail Categorization feature that automatically sorts your email inbox for you that has been … [Read More](https://osxdaily.com/2025/03/31/macos-sequoia-15-4-update-downloa … ⌘ Read more
Ignite Realtime Blog: It’s time for real interoperability. Let’s make it happen
When I explain to others what I do for a living, I often ask why it is that we are not surprised that one can use a Gmail account to send an email to someone who uses an Outlook account, yet many people fully accept that you can’t send a message to someone using WhatsApp from a Telegram account. We’re not surprised that we can use our phone to set up a call with someone who uses a differe … ⌘ Read more
(#7xubh7a) @bender@bender I tend to think of Twtxt like Email. It is truely decentralised. So therefore by design there really is no way to …
@bender @twtxt.net I tend to think of Twtxt like Email. It is truely decentralised. So therefore by design there really is no way to easily discovers others except through social interactions and a sort of “word of mouth” of human exchanges of communications. ⌘ Read more
Emoji Picker Shortcut Not Working in MacOS Sequoia? Let’s Fix It
Some MacOS Sequoia users have discovered the familiar handy Emoji keyboard shortcut to access the Emoji & Symbols panel is no longer working as expected. This can be immensely frustrating, especially if you rely on it for quick access to emojis in messages, emails, documents, and in general. While it might seem like a minor … [Read More](https://osxdaily.com/2025/03/07/emoji-picker-shortcut-not-workin … ⌘ Read more
**Idea: The entire world population email comments@whitehouse.gov with words of disdain 🤣 For example:
Dear Mr. President
Your behavior …**
Idea: The entire world population email comments@whitehouse.gov with words of disdain 🤣 For example:Dear Mr. President
Your behavior today was woeful. I am writing to ask you to resign immediately before you make things much worse.
Kind regards
Citizen of the World ⌘ Read more
How to Disable Apple Intelligence on iPhone, Mac, iPad
Apple Intelligence is an intriguing and powerful set of AI features available on the latest models of Mac, iPhone, and iPad with modern versions of system software. These AI features are tied to ChatGPT and range from useful writing and summarization tools, to business plan creation, to writing emails on your behalf, image generation with … [Read More](https://osxdaily.com/2025/02/18/how-to-disable-apple-intelligence-on-iphone … ⌘ Read more
How to Disable Apple Intelligence on iPhone, Mac, iPad
Apple Intelligence is an intriguing and powerful set of AI features available on the latest models of Mac, iPhone, and iPad with modern versions of system software. These AI features are tied to ChatGPT and range from useful writing and summarization tools, to business plan creation, to writing emails on your behalf, image generation with … [Read More](https://osxdaily.com/2025/02/18/how-to-disable-apple-intelligence-on-iphone … ⌘ Read more
Self-hosting my emails again: A few weeks in
A few weeks ago, I moved back to self-hosting my mail server after using Purelymail for three years. The decision wasn’t about cost – it’s actually more expensive to rent a VPS – but about control, security, and data locality. My mails are now hosted in Europe, giving me more confidence in their privacy, and I can configure everything exactly as I want while ensuring compliance with GDPR. ⌘ Read more
Recover 7GB of iPhone, iPad, & Mac Storage by Disabling Apple Intelligence
Don’t use Apple Intelligence? Don’t care to have Apple Intelligence write your emails for you or instantly create a business plan or any of the handy writing and summary tools? Whether you’re on an iPhone, iPad, or Mac, if you recently updated to the latest versions of system software, then you’ll find that Apple Intelligence … [Read More](https://osxdaily.com/2025/02/12/recover-7gb-o … ⌘ Read more
It’s surprising how much I can reduce the amount of spam that Rspamd needs to filter – whether it ends up in my junk folder or even my inbox – just by blocking certain recipient addresses. Using unique email addresses for each service, like “deezer @ example.com” for Deezer, was one of the best decisions I made, especially combined with a catch-all address. ⌘ Read more
Self-hosting my emails again
After three years with Purelymail, I’m back at self-hosting my mail server. Not because it’s cheaper (it’s actually much pricier to pay for a VPS), but because my mails are now hosted in Europe (who knows what happens next in the USA), I have more control to configure things how I want, and I can comply with GDPR. ⌘ Read more
That moment, when you’re a little pipsqueak self-host(er) with infrastructure you’re trying to protect from potentially rogue customers on Azure …
That moment, when you’re a little pipsqueak self-host(er) with infrastructure you’re trying to protect from potentially rogue customers on Azure Cloud. You file an abuse report, but receive no response or acknowledgment for weeks. Now what? 🤔 Email the CEO! #Azure #Microsoft ⌘ Read more
Let’s Encrypt ends support for expiration notification emails
Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us. We will be ending this service on June 4, 2025. ↫ Josh Aas on the Let’s Encrypt website They’re ending the expiration notification service because it’s costly, adds a ton of complexity to their systems, and constitutes a privacy risk because of all the email addresses the … ⌘ Read more
How to Disable “Follow Up” Mail Suggestions on Mac
One of the polarizing Mail for Mac features is “Follow Up”, which are suggestions on emails that Apple Mail thinks you should follow up with. The idea behind “Follow Up” suggestions in Mail is pretty simple; if you haven’t received a reply or heard back from a particular person or email, the last sent message … Read More ⌘ Read more