How I just unsubscribed every Digg employee from their own service

8 pointsby JeroenRansijnvor 13 Jahren10 comments

When you want to unsubscribe from the Daily Digg, you can simply go to this URL: http://link.digg.com/manage/[email protected]

And manage the subscription for this email. So why not pull a prank and unsubscribe all Digg employees this way.

Let's assume that everyone on the About page of Digg (http://digg.com/about) has an official Digg account such as [email protected]. We load the page and bam, unsubscribe. Hopefully we can raise some confusion at HQ. Funny enough, not every employee is subscribed to the Daily Digg, these guys were not: Jon & Jake, Shivram, Justin, David

10 comments

staunchvor 13 Jahren

It says in your profile that you're 19, so it makes sense that you might not have figured out how not to be an idiot yet. It can take time. What you should have done is simply contacted them privately and let them know. Not unsubscribed them. Not posted about it publicly before they had a chance to fix it.

ternaryoperatorvor 13 Jahren

Discovering a way to screw around with someone's website is not an invitation to do it. Anymore than an open window is an invitation to enter someone's home. Stay classy.

JeroenRansijnvor 13 Jahren

I understand your reaction, but this is basically a backdoor for checking if e-mail accounts exist, and could be misused by serious attacks. I'm only exposing it.

ternaryoperatorvor 13 Jahren

You expose a hole by contacting the company and letting them know so they can fix it. You don't use the hole to dick with their site.

dromidasvor 13 Jahren

It could be worse. He could have gone and generated every possible email [email protected] [email protected] [email protected], etc etc. And unsubscribed them all, stored their email addresses, and then subscribed them all to fox news newsletter.

benzimmervor 13 Jahren

I'll just leave this here for you, in case the next time you find something like this you decide to act like a grown up.

http://en.wikipedia.org/wiki/Responsible_disclosure

JeroenRansijnvor 13 Jahren

Alright guys, thanks for the comments, I'll subscribe them again, and let them now. Didn't consider it so serious.

gscottvor 13 Jahren

Nowdays that is "unauthorized use of a computer" probably 20 years in jail. You can get more names from LinkedIn maybe unsubscribe everyone in the whole company.

itsnotvalidvor 13 Jahren

It should always be the sane thing to report to them about this vulnerability. White hat, man.

cooperxvor 13 Jahren

Yes. Lets punish them for not making it overly complex and hard to opt out.....