2026-04-01T14:56:00Z https://yabu.me Elijah Waxwing https://yabu.me/npub1u4kwssmwmmlqgqzvyvrtlgfu0xcmlyeqc9yhmsju8rpj8xx8afysrjmsqk https://kolektiva.social/system/accounts/avatars/109/320/754/740/976/734/original/2b60dbace0f801bd.jpg https://kolektiva.social/system/accounts/avatars/109/320/754/740/976/734/original/2b60dbace0f801bd.jpg https://yabu.me/nevent1qqs2ucfget7fgdacgpjdqj0ua8jssqppvhvn2q8mjncqg7pr03j2jpqzyrjke6zrdm00upqqfs3sd0ap83umr0unyrq5jlwztsuvxguccl4yjrvfw28 In reply to <a href='/nevent1qqsqd3fv9s6z2j7rnjgw3vlafrj37qjm9unt0dhp7pc5tmk9xlrhpcse8rnqj'>nevent1q…rnqj</a><br/>_________________________<br/><br/>The average email address is about 20 characters long, although there is less entropy because so many people use gmail. Riseup uses argon2 for hashes, so they are memory hard. It is not impossible to brute force, but not trivial either. 2024-05-07T19:40:37Z https://yabu.me/nevent1qqswhx8cyce68ekvvsdc8a5l8e8ykw7f9r8g53kva8kyh92z37a09vgzyrjke6zrdm00upqqfs3sd0ap83umr0unyrq5jlwztsuvxguccl4yjlzsvj2 Protonmail is cop friendly. Any reasonable privacy aware email provider would hash the secondary email, not store it as cleartext. I implemented secondary email hashing for Riseup to prevent exactly this thing, over a decade ago.<br/><br/><a href="https://restoreprivacy.com/protonmail-discloses-user-data-leading-to-arrest-in-spain/">https://restoreprivacy.com/protonmail-discloses-user-data-leading-to-arrest-in-spain/</a> 2024-05-07T02:37:58Z