ProtonMail and SimpleLogin emails will be blocked from registering on websites

https://programming.dev/post/6763015

ProtonMail and SimpleLogin emails will be blocked from registering on websites - programming.dev

This makes me 😭

as someone who uses protonamil as my main email, this is very disappointing
Damn, that guy’s fucking dumb lmao
And reading the project description the domains aren’t even added manually. So the whole issue isn’t needed at all. Might explain why it’s been there since October.
He’s not dumb, he’s extorting people who will probably pay him.
Nobody’s going to pay some random idiot who opened a ticket on a repo they aren’t even a contributer on.
The npm package has about 4000 weekly downloads. I don’t know what that means in terms of popularity.
Less than left-pad. JavaScript devs are wild.
left-pad

String left pad. Latest version: 1.3.0, last published: 6 years ago. Start using left-pad in your project by running `npm i left-pad`. There are 535 other projects in the npm registry using left-pad.

npm
I know it probably predates String.prototype.padStart(), but it boggles my mind that people aren’t just using the standard one.
String.prototype.padStart() - JavaScript | MDN

The padStart() method of String values pads this string with a given string (repeated and/or truncated, if needed) so that the resulting string has a given length. The padding is applied from the start of this string.

MDN Web Docs
I’m really not a fan of heavy-handed approaches like this. I understand why most of the listed domains are on the proposed blocklist, but Tutanota and Proton are the two most common private email options. Rambler is a Russian news aggregate, so I’m not sure why that’s in the list, politics aside
I've seen random surges in emails from Rambler.
If a website won’t allow me to register with my protonmail , I will just not used that website.

Yep.

I’ve already run into a few. I mentally thank them for preventing me from wasting my time and money with them.

Is this going to be the response every time this shit happens until we’re all just sitting on Lemmy twiddling our thumbs?

In a lot of cases, you may not have a choice of using the site or not. In cases where you do have a choice, eventually most if not all the alternatives can do the same shit if it becomes normalized.

The problem is the trend. And try as you may, you can not fully escape that.

Well sometimes those websites ask you to register because you are buying something so they will loose me as a customer. Also even if I complain most companies dont care about privacy so I prefer to use my wallet as a way for this companies to listen my voice.
Use a custom domain on Protonmail (which includes Simplelogin) and you won’t have any issues. It’s a grand total of $5 per year for the domain.
Use a temporary email every time you use the website. Clog their mailing lists full of garbage
Same. That said, sometimes it’s a config error. I sent a very annoyed email to a website that didn’t work on Firefox, only for them to tell me that it was a bug and that they fixed it.
That hadn’t ever happened to me. Not once. So I agree

Simple as, if they don’t even support e-mail it’s surely a rather shite site.

The closed garden corpo-approved electronic message service the github issue is talking about simply won’t do.

GitHub blocked me from registering with a Proton domain:

Our abuse detecting systems flagged your account because of the email address you used to register the account. Before we can remove the flag we need you to add and verify a personal, non-disposable, non-aliased email address.

And since people won’t use the website, the website won’t use the list. So the list would be useless.
The maintainer seems to have followed the same interpretation, weighing legitimate use against spam use. This is the official response to the issue as of 8h ago:

Dear Contributors,

We value your suggestions for expanding our list of disposable email providers. Your input is crucial in enhancing our tool’s capabilities.

Decision on Gmail and ProtonMail Inclusion

After thorough evaluation, we have resolved not to include Gmail and ProtonMail in our list. Our rationale is based on the following technical and operational considerations:

1. **Reputation and Reliability** * **Gmail and ProtonMail**: Established, reputable providers with a high trust level for personal and professional communication. * **Distinction**: Unlike typical disposable email services, they offer long-term, reliable email solutions. 2. **Active Abuse and Spam Prevention Mechanisms** * **Effective Systems**: Both providers have robust mechanisms to detect and mitigate abuse and spam. * **Proactive Monitoring**: Ensures a secure email environment, reducing the prevalence of malicious activities. 3. **Commercial Intent of Typical Disposable Email Providers** * **Focus**: Targeting providers driven by ad revenue, facilitating spam/abuse. * **Gmail and ProtonMail's Model**: User-centric, not primarily ad-driven. 4. **Domain Limitations** * **Effectiveness**: Limited domain offerings by Gmail and ProtonMail make them less susceptible to misuse. * **Strategy**: Focusing on providers with extensive, rotating domain lists for more impactful filtering. 5. **Individual User Accountability** * **Accountability Measures**: Both services have mechanisms to penalize users violating terms, decreasing misuse risks.

Summary and Next Steps

Including Gmail and ProtonMail does not align with our criteria for identifying disposable email services. Our aim is to target services significantly contributing to online spam and abuse, without impacting legitimate email services. We have reviewed your list and agree on adding some providers, like internxt.com (Reference). We will also incorporate the obvious choices from the tail of your list. We apologize for the delay in addressing this issue but intend to promptly resolve it by focusing on the most impactful additions.

please add "temporary-email.org", "internxt.com" Ā· Issue #79 Ā· 7c/fakefilter

please add "temporary-email.org", "internxt.com"

GitHub
Well whatever 7c/fakefilter is, they just got unpopular.
It's a list of domains which provide temporary email addresses. The more interesting question is who uses them.

With 125 stars and 11 forks?

Pretty much nobody.

Edit: If anything, that issue feels like an attempt at viral marketing for fakefilter.

Hard for me to understand how blocking valid email providers like Proton, Tutanota, and Skiff, would actually mitigate any abuse. All it’s going to do is hurt the websites with this filter and prevent privacy-minded folks from signing up. Unfortunate to see, hopefully they get some common sense and don’t block these for no reason.

Honestly, the more these one time accounts try to convince me to remove protonmail and simplelogin, the more I see how much it's needed to block them. It's like the marketing team is desperately trying to keep their services from being rightfully flagged and it just makes me want to block them even more.

what did protonmail do to you ._.

Can you show us on the doll where it touched you?

It appears that the Github user GalacticHypernova is not a contributor to the 7c/fakefilter project - just someone asking for some domains to be added. The current list does not contain proton.me or protonmail.com.

I suppose this might be a reasonable litmus test for the reliability of that list.

fakefilter/txt/data.txt at main Ā· 7c/fakefilter

reliable fake and temp email filter solution for site operators - 7c/fakefilter

GitHub
The issuer is just a random GitHub user. Keep pushing back the PR.
The whole exchange between the ProtonMail person and the repo maintainer is wild. The maintainer is clearly grinding and axe and pretending we should thank them for it github.com/7c/fakefilter/issues/73#issuecomment-1…
Please add simplelogin.io, rambler.ru, emailnator.com, noip.com, seznam.cz, wp.pl, skiff.com, tempmaili.com, proton.me, courvix.com, tutanota.com, 5ymails.com, internxt.com, tempmail.email, emailondeck.com, tempor.email, fakesmail.com, tempimail.org, temp-mailbox.com, temp-mail.us, 10minemail.com, hour.email, cloudtempmail.com, tmail.ai, zemail.me, tempumail.com, emailfake.com, o2.pl, and addy.io Ā· Issue #73 Ā· 7c/fakefilter

simplelogin.io: The current domains according to what I can see are: slmails.com simplelogin.com aleeas.com slmail.me silomails.com 8shield.net 8alias.com dralias.com simplelogin.fr Their entire pr...

GitHub
That dude’s not even a maintainer, just some rando who apparently doesn’t like protonmail.
Imagine having that little happening in your life
Lil bro asks for discord instead of using email ahaha
Email is for boomers duh
Apparently Discord is preferable to email for long form professional communication lmao
That’s not the maintainer, just the user who opened the issue. Here’s a (somewhat ironic) interaction between the same user and the maintainer: github.com/7c/fakefilter/issues/69
Please add anonmails.de Ā· Issue #69 Ā· 7c/fakefilter

Appears to have only one host (anonmails.de)

GitHub
Based on how GalacticHypernova is talking on that thread you’d think Protonmail, Tutanota, Skiff, and SimpleLogin’s CEOs all made fun of them in high school and started their villain arc
You mean Michael Brevard?
Bold of you to assume they’ve been to highschool yet
Nice raid Lemmy
I don’t understand, what’s happening? Blocked where?
Some random email filter project.
Oh well shit if I care, I loathe email anyway. Please block me šŸ˜‚
Nothing is happening, some kid was making requests that were entirely ignored until lemmy jumped in. I cried when they said that they preferred discord to email for official communication.

I thought that bit was hysterical.

"Tell me you've never been employed before without telling me."

"I prefer discord for business communication."

Yeah, not being able to keep track of email was a weak fucking excuse.
Yeah, they should have pushed back and said "Nope, email is the only method we will conduct professional communications over."
Is the creator even a kid? I find it hard to believe a kid would give that much of a shit about email spam lists. But, then again, nearly half his repositories are forks or involve Roblox.
The creator is a chad
Simplelogin supports custom domains. This is a non-issue if you use your own domain(s).

It’s actually really easy to get past the custom domain issue.

If the domain is send-and-receive, it will need a SPF record to avoid getting blackholed by most mail providers. A TXT lookup for the SPF record would tie the custom domain back to the real provider.

Or even easier, you could look up the MX records to see what domain they point to.

I don’t use Simplelogin so I don’t know how their service works. The domains used for aliases don’t need to originate email so there’s no need for an SPF record. The A record for the hostname used for the MX record(s) could technically point at multiple IPs that could be changed often.

I own a significant number of domains and manage my own servers. There’s quite literally no way for anyone to prevent me from using an email alias.

My point was that trying to block email aliases is a fool’s errand. It’s a slight hindrance to only the least technical users. The entire 7c/fakefilter project is an exercise in futility.

So I gotta start using my AOL email again?

Hah, there’s also seznam.cz (meaning ā€œa listā€) - I wouldn’t be surprised if more then half of whole Czech Republic (so ~6M) uses that as their primary mail provider.
It’s also a main local web search and maps provider among other stuff, and pretty popular with non-english speaking part of the population.

If the maintainer accepts this they would be most probably killing the project, can’t imagine people using it when it drops their user registration by a lot because of blocklists this wide.

Seriously. If someone in Czechia doesn’t use gmail, it’s almost guaranteed they use Seznam
This blockist doesn’t have that many users, though.
Dude sounds like he’s a highschool ā€œ1337 hackerā€ tbh. He doesn’t seem to know like fuck all from what I’ve read
Same for Poland - wp.pl and o2.pl are the most used email providers over here. Most of my family have a wp.pl email, nobody uses gmail or anything else.
Sick of sites requiring an account, email or phone number. Makes the web even more unfriendly. I hope temporary emails can always get around filters, as if you play stupid games you should win stupid prices.
I was a club and had to open an account to open a tab, they asked me my government number ID, pretty standard, but then they started asking for phone number, age, email, Instagram account and I was like wtf, I just want a bottle of water!