Skip to content
J
J

Website Upgrades and Opinions

Email address privacy

Posted Feb 25, 2025

Replies5
J
J
JOriginal Poster
Feb 25, 2025

Can someone explain to me why I'm getting spam at an email address that I only use for TN/TS?

The privacy policy implies that this information is safe, but this doesn't feel safe.

ReactReplySubscribe

Replies

  • ME
    Member
    Feb 25, 2025

    I just got one too.

    The sender was thieldsfranciskus (at) gmail.com and the message was "Reach me through this email, (first part of email address). "

    It seems extremely likely that there has been a data breach.

    ReactReply
  • HA
    Half
    Half
    Feb 26, 2025
    [quote]Do not assume there is anything secure about this site.[/quote] ... or ANY site ...
    ReactReply
  • JO
    John
    John
    Feb 26, 2025
    [quote]Can someone explain to me why I'm getting spam at an email address that I only use for TN/TS? The privacy policy implies that this information is safe, but this doesn't feel safe.[/quote] No website is 100% safe, that's just a fact. However, there are bots that crawl the internet and scrape anything looking like an email address. It doesn't mean you have been compromised. Mark it as spam, and move on. Now, I can tell you THIS website (and by default TS) has massive security issues. I have identified several and have been ignored. One of the most concerning is that media does not get deleted when you "delete" it. The only thing that goes away is the link to the media server. The actual photo or video remains on the media server forever, and there is no requirement to be logged in to access media on the media server. You need to know the full file name, but again bots can just do a methodical search through the directory structure looking for a match. I haven't checked recently, but in the past large swaths of the website were accessible without being logged in as well. By default, your profile can be found by web crawlers. Do a search for your user name on google and see what it finds. John aka cobeachbum
    ReactReply
  • ME
    Member
    Feb 26, 2025
    [quote]I haven't checked recently, but in the past large swaths of the website were accessible without being logged in as well. By default, your profile can be found by web crawlers. Do a search for your user name on google and see what it finds.[/quote] Yes, when I originally signed up, my profile was only visible to logged-in users. Then I recently found out that this had changed, without any warning, and my profile picture has been scraped by some image bots. I think I'm going to have to send a GDPR Right to be Forgotten request to TN and include URLs of images containing me, since it's apparent that 'deleting' them does nothing.
    ReactReply
  • EC
    ecurbaus
    ecurbaus
    Mar 6, 2025
    [quote]I haven't checked recently, but in the past large swaths of the website were accessible without being logged in as well. By default, your profile can be found by web crawlers. Do a search for your user name on google and see what it finds. Yes, when I originally signed up, my profile was only visible to logged-in users. Then I recently found out that this had changed, without any warning, and my profile picture has been scraped by some image bots. I think I'm going to have to send a GDPR Right to be Forgotten request to TN and include URLs of images containing me, since it's apparent that 'deleting' them does nothing.[/quote] SmoothScales, when I open your profile from this post it comes up as Private Profile, but it shows me your photos?.
    ReactReply