frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Don't verify email addresses by sending spam to them

https://milek7.pl/mailverifyspam/
94•garaetjjte•2h ago

Comments

bstsb•1h ago
the actual base64 email itself is an HTML document, with a bunch of filler text about metal magnets!

> Hi there, A magnetic domain is a region within a magnetic material in which the magnetization is in a uniform direction. This means that the individual magnetic moments of the atoms are aligned with one another and they point in the same direction [...]

they sign off the email with a zero-width space set to "font-size: 0" for some reason

tom1337•1h ago
Also, the magnet text is not visible:

style="position: absolute; left: -9999px; top:-9999px;display: none"

maybe they try to warm up those emails to use them for other "campaigns" later on...

mike-cardwell•36m ago
The text is added to get around bayesian filters. The spammer doesn't want the text to be displayed to the end user though typically.
autoexec•27m ago
A smart bayesian filter would catch email with invisible text. Legitimate email shouldn't have any, but I have seen it more than once in spam
gus_massa•56m ago
The text is from https://en.wikipedia.org/wiki/Magnetic_domain that uses a CC BY-SA 4.0. I hope they remembered to add the atribution as requested :)
xp84•55m ago
Strange to see this in an apparent real product. And also I don't see how this does much to 'validate' it... It could be a valid email that belongs to a random stranger, like, tcook@apple.com for instance.

Part of me wonders if someone has added something nefarious into their backend which just collects and exfiltrates new emails as people sign up.

vova_hn2•53m ago
The idea that they really send spam to validate an email address sounds to insane to be believable.

Is it possible that they are somehow leaking the address to actual spammers?

For example, they (or the hypothetical email validation SaaS) use an infected email validation library that ex-fills every email supplied to it, or something like this.

kirmerzlikin•53m ago
Can it be that Pangram doesn't send any spam itself but instead (intentionally or not) leaks your email address to some spammer who then does the sending?
autoexec•26m ago
Spamming, leaking, or selling. Either way, I now know that I want nothing to do with Pangram.
aarjaneiro•48m ago
Magnetic domain
legitster•41m ago
I just did a signup on a brand new email address and was not able to recreate. No random spam emails reported. Just a normal verification email.

It's likely that the email the author received is pure coincidence. Especially if they are using a client that downloads emails in batches.

FWIW it looks like their validation email is sent by Customer.IO via Mailgun. Both have squeaky clean service agreements so it's unlikely they are shooting off the data to spammers.

Edit: No way! I did end up getting a random empty email. From a "Adventure-Meter Department" at bugbusterbrigade.com. The topic of the email was "Scents and Memory".

This is a really weird email. It's not a spam email, it's some sort of attempt at inbox testing. Perhaps it's an attempt to sniff out AI agents signing up for their service?

garaetjjte•32m ago
Maybe they don't do that for larger destination providers. But definitely no coincidences here. (in the post I replaced address with example.com because I'm curious if I will ever get other spam onto it, but here's another one unmodified)

  curl --request POST --data '{"email": "pangramdemo@milek7.pl"}' https://www.pangram.com/api/validate-email
https://milek7.pl/mailverifyspam/another.txt
EvanAnderson•30m ago
I just tried with a new email at my domain. I'm excited to see what I get.
jiveturkey•37m ago
looks like a response to https://news.ycombinator.com/item?id=48445834
saltcured•24m ago
I would make even stronger advice.

If you want to verify an email, send me a one-time code with several hours expiry that I have to resubmit through my logged in web identity at your site.

It drives me batty that a financial provider (retirement vendor from previous employer) won't seem to let my "paperless" setting remain active. Only because I don't ping their abusive email tracking pixels etc.

To me, paperless means I can log in and download my quarterly PDF statements and related documents, and they won't be left in a mailbox on the street. It doesn't mean I have to subject myself to reading your silly emails with a promiscuous client.

teeray•18m ago
I really wish you could provide a PGP public key to your bank and have them just email the damn pdf every month.
RulerOf•3m ago
That'd be nice, but I'd even settle for the plain pdf attached to the email.
infogulch•5m ago
To me, paperless means they ATTACH MY STATEMENT TO THE EMAIL. Not signing up to any paperless until they do, none yet have met this bar. The statement is supposed to be a snapshot of the status of the account at a given moment, if you have to open their website to view it they could regenerate it from whatever crap data they have lying around at the given moment. If it can change every time you look at it, it's a quantum statement, it's not a snapshot, it's a vibe. This defeats the entire purpose of getting a statement, I don't know how anyone tolerates this.
zephen•13m ago
Interesting business model.

Sell verification services to one set of clients, and use the harvested email addresses to sell spam delivery to another set of clients.

It's like having a space in a big building downtown with storefronts on two opposite streets. Babysitting/childcare services here; rent a child to go the park with and help you pick up chicks there.

The similar playing-both-sides against the middle that I'm struggling with right now: companies sell (physical) mail addresses to other companies for beaucoup bucks. But if you want to correctly report that your wife has been dead for 9 years because you're tired of getting her USPS spam, they want to charge you to add you to their profitable database.

rubinlinux•10m ago
There is a procedure common in mail sending where you ALMOST do this. You connect to their mail server, tell it you have a message for them, and wait to see if it rejects you or accepts the message. Then you disconnect without actually sending the message. I wonder if this is some kind of confusion among the devs behind this, or some benefit to really sending the message that I can't think of. Does it contain a tracking pixel or anything?

Jerry's Map

http://www.jerrysmap.com/the-map
262•turtleyacht•3h ago•33 comments

United Wizards of the Coast recognized by NLRB

https://unitedwizardsofthecoast.com/news/2026-06-23-we-have-a-union
28•d4mi3n•39m ago•3 comments

Don't verify email addresses by sending spam to them

https://milek7.pl/mailverifyspam/
94•garaetjjte•2h ago•20 comments

Swift Package Index joins Apple

https://swiftpackageindex.com/blog/swift-package-index-joins-apple
143•JDevlieghere•4h ago•45 comments

FUTO Swipe – A new swipe typing model

https://swipe.futo.tech/
162•futohq•4h ago•54 comments

Printing Gaussian Splats

https://www.patreon.com/DanyBittel/posts/printing-splats-161333338
96•ilnmtlbnm•2d ago•6 comments

The worthlessness of Vitamin D is mildly exaggerated

https://dynomight.net/vitamin-d/
146•surprisetalk•6h ago•108 comments

California AB 2047 makes 3d printers off-limits to students, educators, business

https://www.the3dprintingnerd.com/ab2047
5•Buildstarted•24m ago•0 comments

Show HN: TikZ Editor – WYSIWYG editor for figures in LaTeX

https://tikz.dev/editor/
290•DominikPeters•8h ago•58 comments

AI's Affordability Crisis

https://blog.dshr.org/2026/06/ais-affordability-crisis.html
200•ilreb•7h ago•255 comments

Trains halted across Germany because of communication system problem

https://apnews.com/article/germany-trains-halted-communications-radio-problem-deutsche-bahn-e8fd9...
99•sva_•1h ago•86 comments

F3

https://github.com/future-file-format/f3
575•tosh•5h ago•126 comments

Unlimited OCR: One-shot long-horizon parsing

https://github.com/baidu/Unlimited-OCR
419•ingve•11h ago•96 comments

The deadly rise of giant trucks and SUVs

https://www.nytimes.com/interactive/2026/06/21/us/trucks-suv-pedestrian-crashes.html
332•xnx•1d ago•540 comments

Algorithmic Monocultures in Hiring

https://hai.stanford.edu/news/ai-hiring-tools-can-yield-racial-bias-and-systemic-rejection
115•sizzle•3h ago•112 comments

F* file system – file search that reads SSD directly bypassing OS kernel

https://github.com/dmtrKovalenko/ffs
13•neogoose•2d ago•16 comments

Five monitors on a Commodore 128 [video]

https://www.youtube.com/watch?v=ul5hC3PY1Yg
92•EvanAnderson•1d ago•17 comments

The Coming Loop

https://lucumr.pocoo.org/2026/6/23/the-coming-loop/
271•ingve•11h ago•212 comments

Lift4D: Harmonizing Single-View 3D Estimation for 4D Reconstruction In-the-Wild

https://lift4d.github.io/
99•ilreb•7h ago•9 comments

San Diego photologs from the 1970s

https://www.beautifulpublicdata.com/san-diego-photologs-from-the-1970s/
134•jonathanmkeegan•5h ago•46 comments

Samsung demonstrates 3D stacked FETs with triple nanosheet channels at 42nm

https://semiconductor.samsung.com/news-events/tech-blog/from-gaa-to-3d-stacked-fet-expanding-the-...
77•its_ajseven•4d ago•23 comments

On the Skin-Furrows of the Hand (1880) [pdf]

https://galton.org/fingerprints/faulds-1880-nature-furrows.pdf
4•pncnmnp•1d ago•1 comments

ATProto Permissioned Data Proposal Draft

https://github.com/bluesky-social/proposals/pull/94
7•danabramov•1h ago•1 comments

Plotnine

https://plotnine.org/
246•tosh•4d ago•74 comments

Claude Tag

https://www.anthropic.com/news/introducing-claude-tag
216•adocomplete•5h ago•139 comments

Digital euro clears key hurdle as EU seeks to break free from U.S. credit cards

https://finance.yahoo.com/markets/currencies/articles/ecb-secures-key-parliamentary-backing-10271...
149•madars•6h ago•223 comments

Fired by Google for creating the Google workspace CLI

https://twitter.com/JPoehnelt/status/2069482265953087602
162•justinwp•4h ago•106 comments

Mistral OCR 4

https://mistral.ai/news/ocr-4/
412•meetpateltech•8h ago•106 comments

In memory of the man who put red and green squiggles under words

https://devblogs.microsoft.com/oldnewthing/20260622-00/?p=112451
20•saikatsg•4h ago•0 comments

Performance Improvements in Libffi

https://atgreen.github.io/repl-yell/posts/libffi-plan-cache/
35•atgreen•2d ago•6 comments