Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The blacklist can be compromised, which is a larger vulnerability than having no blacklist.


Save only the hash, or use a data structure like a bloom filter.


I blacklist is modified, notify me via SMS (the same way Google/Facebook can handle you not able to get into your account).


It's not about modifying; just reading the addresses you don't want to send mails to is informing enough.


Don't display them to the user without two-factor authentication then. Everything can be compromised at some point.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: