EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 10·5 min read
A researcher bought noreply.net. Companies started sending him secrets
TL;DR
Cory Solovewicz, a security researcher, unintentionally created a honeypot by acquiring noreply.net, leading to the receipt of over 400,000 emails containing sensitive information from various companies. His findings highlight significant misconfigurations in corporate email systems.
✦ Why It Matters
Review your email configurations to ensure sensitive information isn't being misdirected.
Key Takeaways
- Check your email system for misconfigured addresses.
- Educate teams on the risks of using placeholder email domains.
- Implement monitoring for sensitive data leaks.
- Consider the implications of domain ownership on data privacy.
Full Summary
Cory Solovewicz, a security researcher, purchased the domains noreply.us and noreply.net with the intention of enhancing his email privacy. However, since December 2024, he has received an astonishing 401,796 emails, averaging nearly 700 per day, many of which contain private information and company secrets.
These emails include sensitive data such as injury reports, pizza order confirmations, and account setup notifications. Companies mistakenly send emails to addresses like [companyname]@noreply.net, believing they are unmonitored.
Solovewicz's accidental honeypot has turned into a project aimed at alerting organizations about their email misconfigurations. He presented his findings at the Defcon security conference, emphasizing the importance of addressing these vulnerabilities to prevent data leaks.