As part of my ongoing #infosec #research, I set up an email aliasing service using SimpleLogin to better understand how publicly available email addresses are being used and abused online.

It had been a while since my last serious #infosec #pentest test, but when an old client threw me a challenge over drinks, I couldn’t resist. The stakes were high: a new system his company had deployed, allegedly impenetrable, and he was confident I wouldn’t crack it. Little did he know how this would unfold.