J
JOriginal Poster
Feb 25, 2025Can someone explain to me why I'm getting spam at an email address that I only use for TN/TS?
The privacy policy implies that this information is safe, but this doesn't feel safe.
ReactReplySubscribe
Replies
- MEMemberFeb 25, 2025
I just got one too.
The sender was thieldsfranciskus (at) gmail.com and the message was "Reach me through this email, (first part of email address). "
It seems extremely likely that there has been a data breach.
ReactReply - HA
HalfFeb 26, 2025[quote]Do not assume there is anything secure about this site.[/quote] ... or ANY site ...ReactReply - JO
JohnFeb 26, 2025[quote]Can someone explain to me why I'm getting spam at an email address that I only use for TN/TS? The privacy policy implies that this information is safe, but this doesn't feel safe.[/quote] No website is 100% safe, that's just a fact. However, there are bots that crawl the internet and scrape anything looking like an email address. It doesn't mean you have been compromised. Mark it as spam, and move on. Now, I can tell you THIS website (and by default TS) has massive security issues. I have identified several and have been ignored. One of the most concerning is that media does not get deleted when you "delete" it. The only thing that goes away is the link to the media server. The actual photo or video remains on the media server forever, and there is no requirement to be logged in to access media on the media server. You need to know the full file name, but again bots can just do a methodical search through the directory structure looking for a match. I haven't checked recently, but in the past large swaths of the website were accessible without being logged in as well. By default, your profile can be found by web crawlers. Do a search for your user name on google and see what it finds. John aka cobeachbumReactReply - MEMemberFeb 26, 2025[quote]I haven't checked recently, but in the past large swaths of the website were accessible without being logged in as well. By default, your profile can be found by web crawlers. Do a search for your user name on google and see what it finds.[/quote] Yes, when I originally signed up, my profile was only visible to logged-in users. Then I recently found out that this had changed, without any warning, and my profile picture has been scraped by some image bots. I think I'm going to have to send a GDPR Right to be Forgotten request to TN and include URLs of images containing me, since it's apparent that 'deleting' them does nothing.ReactReply
- EC
ecurbausMar 6, 2025[quote]I haven't checked recently, but in the past large swaths of the website were accessible without being logged in as well. By default, your profile can be found by web crawlers. Do a search for your user name on google and see what it finds. Yes, when I originally signed up, my profile was only visible to logged-in users. Then I recently found out that this had changed, without any warning, and my profile picture has been scraped by some image bots. I think I'm going to have to send a GDPR Right to be Forgotten request to TN and include URLs of images containing me, since it's apparent that 'deleting' them does nothing.[/quote] SmoothScales, when I open your profile from this post it comes up as Private Profile, but it shows me your photos?.ReactReply

