Skip to content

Deleteduser.com – A $15 PII Magnet

mike-sheward.medium.com
3 pointsp4bl02 comments
On HN

Comments

Using an actual valid domain name for this seems crazy to me. Or, if your database system enforce the use of a valid domain name, why not use a randomly generated subdomain of a domain in your control? Something like login@RANDOMSTRING.deleteduser.yourcompany.tld is also searchable if needed and does the same thing.

Once paths are network addressable, ://dev/null could work similarly.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.