6 points | by hardenedmetapod 7 hours ago
7 comments
> So the question here is what part of their system is so fundamentally broken that scammers instantly get my email?
Perhaps none. Did the T&Cs permit this disclosure?
Not that I can see offhand. It mentions using your email for correspondence and copyright disputes.
I'd say odds on Poshmark leaking your address to the seller.
The fact you got spam so soon makes me wonder, did you get your goods?
Yikes. I wonder if there's a way to differentiate between the bad-seller and the poshmark-is-compromised case.
There's a third case that I never considered.
Google SSO is the promoted way of signing in and it auto assigns your email to the username without any special characters so scammers could just be scraping new accounts and making a best guess at the email.
Lame.
I'd call that the first case and the second case. Lame indeed.
Sure. Be a seller.
> So the question here is what part of their system is so fundamentally broken that scammers instantly get my email?
Perhaps none. Did the T&Cs permit this disclosure?
Not that I can see offhand. It mentions using your email for correspondence and copyright disputes.
I'd say odds on Poshmark leaking your address to the seller.
The fact you got spam so soon makes me wonder, did you get your goods?
Yikes. I wonder if there's a way to differentiate between the bad-seller and the poshmark-is-compromised case.
There's a third case that I never considered.
Google SSO is the promoted way of signing in and it auto assigns your email to the username without any special characters so scammers could just be scraping new accounts and making a best guess at the email.
Lame.
I'd call that the first case and the second case. Lame indeed.
Sure. Be a seller.