Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.
Case Study: Email Startups
Comprehensive analysis of email startup failures. Why most email companies fail, burn millions in VC funding, and shut down. Learn what actually works.
Falsehoods programmers believe about email
In the spirit of falsehoods programmers believe about names and time, here’s some falsehoods about email which are all too common.
FBI Director Kash Patel’s Personal Email Account Apparently Breached By Iranian Hackers
Call me a sicko, but I’m almost always happy when a top-level government official’s communications get hacked. That’s because — in almost every case — either the offic…
After self-hosting my email for twenty-three years I have thrown in the towel. The oligopoly has won.
Many companies have been trying to disrupt email by making it proprietary. So far, they have failed. Email keeps being an open protocol. Hurray? No hurray. Email is not distributed anymore. You just cannot create another first-class node of this ne
Email address obfuscation: What works in 2026?
Here are some of the best techniques for keeping email addresses hidden from spammers—along with the statistics on how likely they are to be broken.
Email address obfuscation: What works in 2026?
Here are some of the best techniques for keeping email addresses hidden from spammers—along with the statistics on how likely they are to be broken.
Online Trust and Safety Hub: Stay Safe Online | Internet Society
Learn how to stay safe online, protect your privacy, spot scams, identify false information, and build safer digital habits.
Persistent, Sandboxed, Single-Site Browser (firejail and proxychains) - Michael Altfield's Tech Blog
Or how to avoid getting locked-out of another Google Account This guide will describe how to setup a persistent browser (for Evil Corp) that’s isolated in a sandbox (with firejail) and forced to use a SOCKS5 proxy to retain a static IP address (using proxychains) Have you ever been locked out of your own account, and then got an email for your service provider annoyingly letting you know that they’ve “blocked a login attempt — for your protection?“ There’s countless reports of frustrated users who have permanently lost access to their own gmail accounts because of Google’s faulty “fraud protection” systems that locked the account owner out of their own account, due to false-positives. Problem Especially the past 10 years, large corporations have been using machine learning anomaly detection systems on their login pages. Unfortunately, sometimes this is (ab)used to have priority over credential authentication challenges. Even if you enter your username, password, and 2FA credentials correctly on the very first login attempt, you may get locked out of your own account because you “look different” Even if you enter your username, password, and 2FA credentials correctly on the very first login attempt, you may get locked . . . → Read More: Persistent, Sandboxed, Single-Site Browser (firejail and proxychains)
The Case for Unique Email Addresses — Musings
For the past few years, every company I interact with doesn't get the same email address from me. I'm trying to be as plain as possible w...
CAPTCHA successor Privacy Pass has no easy answers for online abuse | The Mozilla Blog
As much as the Web continues to inspire us, we know that sites put up with an awful lot of abuse in order to stay online. Denial of service attacks, fraud
Meeting notes april 1st, 2025
Quick catch up with [[Sam Gbafa]], founder of [[TinyCloud]], who I've worked with hacking on various local first / user owned data / identity stuff for a whi...
Unauthorized access, personal data leaks surge in Japan | NHK WORLD-JAPAN News
A series of cyberattacks have led to leaks of large amounts of personal data from companies across Japan. Experts say the misuse of AI may be contributing to the growing threat. As this new challenge emerges, how should companies, and society as a whole, respond?
The Emergent Self Loop
Nearly once a week I receive an email from a different stranger.
Announcing the Centre for Cryptographic Trust Infrastructure
You’re getting this email because you subscribed to my blog posts at martin.kleppmann.com.
Oh dear lord, I knew it was bad, but didn't know it was this bad: hackers.pub/@fedify/2026/why-activitypub-… (I've mostly just contributed to activitypub projects that already existed, so didn't usually need to experience these specific pains)
Why implementing ActivityPub is hard, and why it doesn't have to be
hackers.pub