> Does Posterous fallback to just checking the sender email address? Apparen... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

robinduckett on June 18, 2010 | parent | context | favorite | on: How I "hacked" Dustin Curtis's Posterous.

> Does Posterous fallback to just checking the sender email address?

Apparently so, I didn't even change my name.

frognibble on June 18, 2010 | [–]

Do you use Google Apps For Your Domain? If so, that might have foiled any IP address checking because dustincurtis.com is also hosted there.

EDIT: You must not be using Google Apps for Your Domain because Google does not allow sender forging.

rantfoil on June 18, 2010 | [–]

Thanks for the bug report. This bug is now fixed.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact