If spammers can abuse something, they gonna abuse it

  • Björn Tantau@swg-empire.de
    1·
    1 year ago

    I mean, allowing arbitrary characters in the name is one thing. I think I would do that as well, as there are many weird names out there.

    But then actually parsing it out (or not escaping it properly), that’s the real sin.

    • Sekoia@lemmy.blahaj.zone
      1·
      1 year ago

      Somebody created an account at MyEpson with OP’s email address and the name “GET BITCOIN NOW link”, which sends a confirmation email to OP with that name. Basically it’s spam using Epson as a trojan horse to get past filters.