@zfa - eviltoast
  • 0 Posts
  • 9 Comments
Joined 1 year ago
cake
Cake day: October 11th, 2023

help-circle



  • It would be remiss of me to not point out that up until somewhat recently they had a gaping wide security hole (for presumably years) that allowed any customer to send email as any other and fully pass their spf and dkim checks (due to shared keys and having no way of ensuring their users could only send mail from domains under their own account).

    When this was disclosed they abused the reporter, kicked him off their service without giving him time to back up his mail, tried to discredit him, lied that their bad practices were commonplace throughout the industry (narrator: they weren’t) before finally going around removing all traces of the discussion. I was lucky(?) enough to see the reddit side of it as it unfolded and I’ve never seen such pseduo-tech bullshit being thrown around and well as nasty attacks on the reporter.

    So yeah, they’re cheap but they also seem pretty poor technically (or at least were) and seem like horrible people. YMMV of course.





  • I don’t self host anything where it would impact me unduly if it went down while I was on holiday to the point where I’d have to break state and go fix stuff.

    I don’t want to have to leave my beer or beach and head off to fix things like an email server, restore a password manager db etc. so anything like that which is critical to the point where an outage would prob have me do so means I pay someone else.