this post was submitted on 08 Jan 2025
139 points (96.0% liked)

Selfhosted

41294 readers
498 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Just discovered this cool project, thought i'd share it here.

AliasVault is an end-to-end encrypted password and alias manager that protects your privacy by creating alternative identities, passwords and email addresses for every website you use. Keeping your personal information private.

Link to website: https://www.aliasvault.net/

Link to source code (MIT Lisense): https://github.com/lanedirt/AliasVault

For those wondering how the alias feature works:

AliasVault includes a built-in email server that allows you to create unique email addresses (aliases) for different services. When someone sends an email to your alias, it's received directly in AliasVault, helping you maintain privacy and reduce spam.

you are viewing a single comment's thread
view the rest of the comments
[–] Engywuck@lemm.ee 2 points 2 weeks ago (1 children)

A catch-all domain address with whois privacy and hosted elsewhere helps a lot.

[–] Tetsuo@jlai.lu -5 points 2 weeks ago (2 children)

Does it?

Do you think spammer will just stop at the first address and then call it a day?

In my experience there is no such thing as a "catch all" domain address. The second your domain leaks then many spammer will just go into a frenzy and try hundreds or thousands of mail aliases.

Especially since they can't really spam Gmail as easily (since early 2024) they will even more aggressively spam any other domain.

[–] Moonrise2473@feddit.it 7 points 2 weeks ago (1 children)

spammers they just email info@domain and call it a day, they don't try to see if you have some custom naming scheme. I bounce all emails sent to that, the rest is catchall, with occasional blacklist to some TLD like .monster .asia .xyz or .su

[–] Tetsuo@jlai.lu 0 points 2 weeks ago (1 children)

This is not at all my experience with custom mail domains.

And I say that after spending a lot of time setting SPF, DKIM and DMARC filtering.

I guess you got lucky.

[–] ShortN0te@lemmy.ml 3 points 2 weeks ago (1 children)

Why should a scammer or spammer bother with a tech savy person. Scammers and spammers use E-Mail dumps from data leaks to spam and scam ppl. The first step is automated, way more profitable then to go spear fishing on a normal user.

[–] Tetsuo@jlai.lu 0 points 2 weeks ago (1 children)

I'm not sure why people are trying convince me to change my mind on something.

I have seen it in my logs with my own eyes. I wish I could be left alone without having to bother looking into it.

Whatever the reason is. Someone is crawling through dictionaries of address. It is slow but steady. It started with abuse@ and other generic addresses and then started trying names. I blocked the sending SMTP server once I realized what was going-on.

What am I suppose to do? Ignore it and just triage in inbox?

[–] ShortN0te@lemmy.ml 1 points 2 weeks ago

It is just not the way the usual scammer and spammers operate. Ofc there are other types of criminals that do operate differently but those do not get their Addresses from a data leak which E-Mail aliases pretect against

[–] Engywuck@lemm.ee 4 points 2 weeks ago (1 children)

More than 2 years with my personal domain and I can't remember a single spam email... But you do you.

[–] NaibofTabr@infosec.pub -2 points 2 weeks ago (1 children)
[–] Engywuck@lemm.ee 1 points 2 weeks ago

Again, you do you.