EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 8·5 min read
Sensitive Info Goes into 'No Reply' Emails Constantly. This Guy Sees It All
TL;DR
Cory Solovewicz, a security researcher, inadvertently created a honeypot for sensitive information by owning the domains noreply.us and noreply.net, receiving hundreds of thousands of misdirected emails containing private data. His findings highlight significant misconfigurations in corporate email systems, prompting a call for better data handling practices.
✦ Why It Matters
Audit your email systems today to prevent accidental data leaks and protect sensitive information.
Key Takeaways
- Regularly audit email configurations to prevent data leaks.
- Consider using internal domains for automated emails.
- Monitor for unintended emails sent to placeholder addresses.
- Educate teams on proper email handling practices.
How It Works
Solovewicz's domains receive emails intended for non-monitored addresses, revealing how companies misconfigure their systems. By owning these domains, he captures automated emails that should not be sent to real addresses, highlighting a significant oversight in data privacy.