Hacker News new | past | comments | ask | show | jobs | submit login

> 2 services moved my account to a different email address instead of deleting it. I was only able to detect this because they changed the mailbox part (the bit in front of the @ sign) but left the domain unchanged. I capture all incoming emails to my domain, so I saw email-change confirmation emails and other emails arriving at the new unexpected addresses.

That's sketchy, especially if you don't own the domain but you're on a multi tenant domain like Gmail




AFAIK, with the default domains owned by the email providers, Gmail and Yahoo don’t recycle unused/deleted gmail/yahoo addresses ever (whereas other paid providers like Fastmail, Posteo, etc., do recycle within a few months or in a year or so). One needs to be wary of address recycling policies while using somebody else’s domain.


This is talking about registering with example@gmail.com on ServiceX.

Then you ask ServiceX to delete your account, and they instead change your email address to example-deleted@gmail.com or something like that.

I doubt GMail are going to stop you registering accounts that have arbitrary portions of your email being another registered user.


GP here. I understood that part on later reflection. Yes, any random name-deleted address could be registered by someone else.

I’m unable to edit my previous comment now and correct it. Will add a note as a reply anyway.


I’m unable to edit my comment above, but I understood the problem of changing the email address (even to something like name-deleted, since it could be claimed or already registered by someone else). In this context, my comment above is pointless. :(

Thanks also to @paranoidrobot for the additional explanation.


I had this happen with Adobe


I had the same experience with a UK fintech.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: