Show HN: Danger – API to expose fake signup or transaction details
usedanger.com
usedanger.com
> It does this by checking if the email is registered on 20 apps and services in real-time.
So if my email isn't registered on those, does it mean you'll flag me?
edit: yes, turns out it adds 50 points to your risk score, and not being in any breaches adds another 5 (breach check doesnt seem to work properly? i dont know what it uses as a source)
so my business email would be 50+5 points meaning high risk
also apparently having 5+ digits in your email adds 5 points to your risk score too, which I don't really understand the reasoning for
i tried a disposable email (from the top result from google) and it wasn't flagged, and 4 more from different high ranking sites and only 2 got flagged so you probably want to improve that
and my ISP is also flagged as a "known threat" for some reason, even though it's a completely normal large residential isp
Business emails are harder to screen using this method but your understanding is correct, it is flagged as high risk because of not being found on those sites.
We'll check the disposable email sources, thanks for your feedback on that.
Some ISPs do show as a risk, even genuine residential. We can tweak the thresholds over time. We keep an eye on this.
We don't attribute a high number of points to this because it doesn't deserve a high weighting but it's probably right to factor it into the score.
Having said that it's early days for us and we're still tweaking/testing.