Skip to main content


An online conversation I witnessed yesterday reminded me of the existence of two distinct but related grating Internet personas:
  • The type of guy (it's always a man) boasting that their email address has never been featured in https://haveibeenpwned.com and indirectly shaming people for signing up with popular providers like Adobe or Patreon.
  • The type of guy (it's always a man) challenging you to guess their personal email address as a reason not to allow usernames in the login field of an authentication form.


Kids, don't be like these two.

Kat Moss reshared this.

@Hypolite Petovan wait - what
Bragging about never using services? Bragging about only using services obscure enough they don't get reported when the user data is stolen?
@silverwizard I’ve got nothing. It’s one of the weirdest self-awarded badge of honor that I’ve ever seen.
@Hypolite Petovan Now I'm wondering how many of my email addresses are in Have I Been Pwned
@Hypolite Petovan Only two emails have been compromised since I started hosting my own email

The email address my dad manages for me is in 9 lists, but it's also been around since highschool so got used on a lot of things
@silverwizard @Hypolite Petovan I used to sign up with a custom email address per service, so I'd know who leaked my email address to spammers. Stuff like mcv=adobe@mydomain.nl. But a lot of email forms don't allow that sort of email address, which is stupid.
@Martijn Vos @Hypolite Petovan Yeah - I just give them `companyname`@`whateverdomainIuse` so it looks like a real email to the regex

But I have been told I can't have their company name in my email before
It sounds like a geek version of "if you don't have a Rolex by 50 you failed at your life". Definitely the same vibe.