eggsampler

> But that’s the point [...]

No, that's not the point.

> Sure, you might not be able to use Google’s own servers to send that email

That is the point. Why does Fastmail allow this where Google doesn't. At best, it's ignorant and intentionally misleading. At worst, downright malicious and ripe for abuse.

Sure, I get that. I get there is a whole weird and wacky world of email use that is considered legitimate and needs to work that way for a myriad of reasons. I don't get why their MTA cannot at least have an option to reject mail from your domains if it's not being sent using your account credentials.

The average layperson will not get that. I'm fairly sure if my mother received an email that wasn't delivered to a their spam folder saying "Hey, remember that old copy of my birth certificate you have floating around? Could you send that. Also, CC my good friend bad_user@fastmail.com" that she would call me first - if I was reachable. Also is totally ignorant of digital signatures and most likely unable to verify any present anyway.

As much as I dislike Google and try to avoid their products and services at all cost, at least I have confidence this wouldn't happen with them. Not that I would go back, but it's still concerning.

I have received a spoofed email from my own domain, so I believe it's not just Fastmail domains but any custom domain on an account.

I'm not certain, maybe there's a technical reason they can validate account credentials but not map credentials to addresses/aliases. Doesn't instill confidence either way.

I've been a happy Fastmail customer too, until I was made aware that you can impersonate other Fastmail customers by just spoofing the email address. Their servers just happily accept it. SPF and DKIM all pass with flying colours, and the only way you'd know it's happened is if you have DMARC on and happen to notice a pass in the report you don't remember sending. Well, that is if the recipient doesn't reply to the spoofed message - hope the damage wasn't already done though. It's effectively impossible for the recipient to know it's been spoofed.

The worst part is I think Fastmail is aware of it and just don't care (believe that's why they mark their emails with a green tick and text). I understand that email has never been really authenticated, but this just throws any trust I had in Fastmail out the window.

I will be evaluating other mail hosts at the end of my subscription.

The rollout didn't follow political seats. Numbers showed initial rollouts followed 67 labor, 61 coalition, 6 others. Anything more recent than that is really only attributable to the new NBN's MTM direction.

http://www.abc.net.au/news/2012-03-29/government-announces-n...

I'm on the southside and have an old p4 2.4ghz w/ 2gb ddr2, some asus motherboard, gpu and a coupla hdds. Unfortunately there's no case but if you can come grab it it's all yours. Also a raspi 1 model b and 22" lcd.

Email me hnpc at eggsampler dort com

It's also worth noting that a lot of the pay4botnet sites masquerading as stress testing services can't/won't do ipv6, which offers slightly more availability with ipv6 linked or dual-stack services - at least for now.