[{"data":1,"prerenderedAt":324},["ShallowReactive",2],{"project-6700719":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":5,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":32,"aspects":33,"strip":41,"post_text":43,"what":44,"said":64,"maker_in_thread":151,"shape":156,"grid":161,"attempts":284,"same_week":285,"maker_shows":254,"maker_hidden":316,"reader_version":317,"card":318},"6700719","emailipleaktest.com","Test your E-Mail for IP Leaks","title","Show HN: Test your E-Mail for IP Leaks","http:\u002F\u002Femailipleaktest.com","rasengan",1383972682,2013,50,47,501,1739,29,"notable","security_privacy","email privacy testing","web_app",[23,24,25,26],"email ip leak","email privacy","x-originating-ip","smtp headers","roasted",-0.491,{"positive":30,"neutral":31,"mixed":30,"critical":31},0,13,26,{"execution":34,"privacy":36,"idea":38,"docs":40},{"positive":30,"critical":35},4,{"positive":30,"critical":37},1,{"positive":30,"critical":39},7,{"positive":30,"critical":37},[37,37,42,42,42,42,42,42,42,42,30,30,30,30,30,30,42,42,30,30,30,30,37,37,37,37,42,37,30,30,37,30,30,30,37,37,30,42,37,37],3,null,{"problem":45,"audience":43,"pricing":43,"motivation":43,"time_to_build":43,"stack":61,"openness":62,"stage":63,"team_size":62},{"value":46,"source":47,"evidence":48},"Email headers can reveal the sender's IP address; the site tests whether a sent email leaks it.","inferred",[49,53,57],{"id":50,"by":51,"text":52},"6700887","skrebbel","Pardon my ignorance, but I don't get it. Why is it a problem whether email leaks IP addresses? After all, anytime I visit a web site I \"leak\" my IP address. Is that also a problem?",{"id":54,"by":55,"text":56},"6700899","meowface","It's all about the linking of one thing to another. If you browse news.ycombinator.com without ever registering, a site admin viewing access logs doesn't really have any frame of…",{"id":58,"by":59,"text":60},"6701014","cynwoody","Actually, if you are corresponding with me, it's marginally useful if your email leaks your IP. It means I can select Show Original in Gmail and see your X-Originating-IP header.…",[],"unknown","launched",{"praise":65,"objections":78,"requests":112,"questions":124,"alternatives":139},[66],{"value":67,"source":68,"evidence":69},"Neat idea and useful for awareness of email IP leakage","commenter",[70,74],{"id":71,"by":72,"text":73},"6701348","spindritf","Neat idea but I (and like 1% of the Internet population so it's clearly of utmost importance!) connect to GMail over IPv6 so you won't catch that even if they leak. On a related…",{"id":75,"by":76,"text":77},"6701022","3825","I would like to imagine this is more for awareness. Why would exchange server want to include x-originating-ip? Is it for validation and authentication? Do we not trust people…",[79,87,94],{"value":80,"source":68,"evidence":81},"Fails over IPv6; reports false negatives when connecting over IPv6",[82,86],{"id":83,"by":84,"text":85},"6700865","andreaso","You know, IPv6... I'm getting a false \"Your email has been received and it doesn't leak your IP\", due to the fact that the web site is only available using IPv4 while I'm…",{"id":71,"by":72,"text":73},{"value":88,"source":68,"evidence":89},"Test adds little beyond sending yourself an email and checking headers",[90],{"id":91,"by":92,"text":93},"6700866","pallandt","I just tested this out of curiosity to see if it showed me anything else other than what I could already easily find out by myself via just sending myself an email and looking at…",{"value":95,"source":68,"evidence":96},"Possibly a lead-generation or email harvesting site; suspicious of ties to VPN marketing",[97,101,105,109],{"id":98,"by":99,"text":100},"6700980","jey","Is this a site that is trying to (inefficiently) harvest IPs \u003C-> emails? :P",{"id":102,"by":103,"text":104},"6701254","X4","Same feel: Copyright (C) 2013 London Trust Media, Inc. Immediately lost my \"Trust\". Added to that, knowing how persuasive and creepily mad London politics is about evading…",{"id":106,"by":107,"text":108},"6701147","mingabunga","Looks like a thing to scare you in to buying the VPN service from Private Internet Access (PIA)",{"id":110,"by":92,"text":111},"6707297","Warning: your email is possibly harvested for spam. I tested this yesterday with a newish account and already received unwanted email.",[113,117],{"value":114,"source":68,"evidence":115},"Handle IPv6 and detect IPv4 addresses when the site is reached over IPv6",[116],{"id":83,"by":84,"text":85},{"value":118,"source":68,"evidence":119},"Include solutions for leaking headers, not just the test result",[120],{"id":121,"by":122,"text":123},"6701349","aluhut","You should include a collection of solutions after a positive. Or is this really only marketing?",[125,129],{"value":126,"source":68,"evidence":127},"Why do email servers include X-Originating-IP headers at all?",[128],{"id":75,"by":76,"text":77},{"value":130,"source":68,"evidence":131},"Does Google Apps web interface add the X-Originating-IP header while regular Gmail does not?",[132,136],{"id":133,"by":134,"text":135},"6701695","Encosia","I just tested one from my Google Apps account's web interface and emailipleak.com claims that it didn't include my IP (same sending on that account through Outlook 2013 too). I…",{"id":137,"by":55,"text":138},"6702613","Regular gmail.com accounts do not send this header, but I've recently found out that all Google Apps accounts do, and have for a while. I assume there's some kind of a rationale…",[140,144],{"value":141,"source":68,"evidence":142},"Sending yourself an email and inspecting the headers",[143],{"id":91,"by":92,"text":93},{"value":145,"source":68,"evidence":146},"Postfix header_checks to strip Received headers",[147],{"id":148,"by":149,"text":150},"6702518","jlgaddis","After the Snowden leaks, I moved all of my e-mail to a server I own. I use authenticated SMTP with mutt and Thunderbird on my laptops and also occasionally run mutt on the server…",{"comments":37,"answered":30,"key":152},[153],{"id":154,"text":155},"6700725","If you are worried about your e-mail, simply create a secondary\u002Fthrow away e-mail with a similar setup to test.",{"commenters":157,"max_depth":158,"maker_replies":37,"first_comment_mins":159,"lifespan_hours":160},38,6,2,40,[162,164,167,171,174,175,178,181,184,186,189,190,192,195,196,199,201,204,206,207,209,213,216,220,223,227,230,232,235,237,238,242,244,248,251,253,255,256,258,262,265,267,269,272,276,278,281],[83,30,37,163,84,30],"project\u002Fcritical\u002Fexecution",[165,30,37,163,166,30],"6701267","alextingle",[168,37,42,169,170,30],"6700935","project\u002Fneutral\u002Fprivacy","tedunangst",[172,37,42,169,173,30],"6701144","asdfaoeu",[133,37,42,169,134,30],[176,37,42,169,177,30],"6701196","chid",[179,37,42,169,180,30],"6701692","breakall",[182,37,42,169,183,30],"6701334","ancarda",[185,37,42,169,170,30],"6701666",[187,37,42,169,188,30],"6702343","pasbesoin",[137,37,42,169,55,30],[50,159,30,191,51,30],"commenter\u002Fneutral\u002Fprivacy",[193,159,30,191,194,30],"6700893","wyck",[54,159,30,191,55,30],[197,159,30,191,198,30],"6701012","nitrogen",[200,159,30,191,55,30],"6701069",[202,159,30,191,203,30],"6702394","fragmede",[205,159,30,191,55,30],"6702600",[58,159,42,169,59,30],[208,159,42,169,55,30],"6702629",[210,159,30,211,212,30],"6701086","other\u002Fneutral\u002Fprivacy","psc",[214,159,30,211,215,30],"6702414","jdmt",[217,159,30,218,219,30],"6701352","commenter\u002Fcritical\u002Fidea","smickie",[221,42,30,211,222,30],"6701048","nisa",[224,35,30,225,226,30],"6700837","other\u002Fneutral\u002Fnone","sfrechtling",[228,35,30,225,229,30],"6700950","lstamour",[71,231,37,163,72,30],5,[233,158,37,163,234,30],"6701413","lucb1e",[98,39,37,236,99,30],"project\u002Fcritical\u002Fidea",[102,39,37,236,103,30],[239,39,42,240,241,30],"6701271","project\u002Fneutral\u002Fidea","reidrac",[243,39,37,236,103,30],"6702839",[245,246,30,211,247,30],"6701132",8,"racbart",[249,246,30,211,250,30],"6701160","batuhanicoz",[252,246,30,211,247,30],"6701183",[91,254,37,236,92,30],9,[75,254,30,211,76,30],[148,257,30,211,149,30],10,[259,260,30,211,261,30],"6708440",11,"ihenriksen",[154,263,30,264,10,37],12,"maker\u002Fneutral\u002Fidea",[110,31,37,266,92,30],"project\u002Fcritical\u002Fprivacy",[106,268,37,236,107,30],14,[270,268,30,225,271,30],"6701324","wrongc0ntinent",[273,274,42,240,275,30],"6700867",15,"t0",[277,274,37,236,55,30],"6700914",[279,274,37,236,280,30],"6701590","fophillips",[121,282,37,283,122,30],16,"maker\u002Fcritical\u002Fdocs",[],[286,291,296,301,306,311],{"id":287,"name":288,"points":289,"category":290},"6691316","StackDock",387,"infrastructure",{"id":292,"name":293,"points":294,"category":295},"6719582","thisplusthat",148,"ai",{"id":297,"name":298,"points":299,"category":300},"6721474","giveit100.com",147,"productivity",{"id":302,"name":303,"points":304,"category":305},"6696654","Rather",98,"consumer_social",{"id":307,"name":308,"points":309,"category":310},"6689214","Shippo",95,"web_saas",{"id":312,"name":313,"points":314,"category":315},"6727586","DataNitro",82,"data",false,"v2",{"id":319,"name":5,"line":6,"ai":316,"cat":19,"year":12,"points":13,"comments":14,"rec":27,"s":320,"top":17,"kw":321,"maker":10,"domain":5,"tier":18,"attempts":30,"strip":322,"url":9,"mix":323,"praise":67,"objection":80,"sub":20},6700719,-0.49,[23,24,25,26],"1133333333000000330000111131001000110311",[30,31,30,31],1793990899537]