This is a nice sibling problem to validation. In both cases, the bug is assuming an email address has a predictable human structure