I've received an email indicating that I've won a prize in the #SOreadytohelp t-shirt competion that contains a link to a Google Docs form. Having been around the block a few times, the email and form both smell a bit phishy to me:
- The email is not specific about how the prize was won (it's actually completely non-specific).
- The email does not address me by name, or even by screen name.
- Neither the email nor the form contain links to Stack Overflow or Stack Exchange.
- Neither the email nor the form feature any logo or other Stack Overflow or Stack Exchange trademarks.
- The form is asking me to enter information that I would not expect to have to enter if the email were genuine.
I understand that the email address in my profile is not supposed to be publicly available, but Stack Overflow wouldn't be the first site in web history that wasn't completely secure. As much as I'd like to claim the prize, I'm reluctant to enter my phone number and Stack Overflow profile link into some unknown Google document without further confirmation regarding its validity, since doing so could provide confirmation of my email address, notification of my phone number and cross-reference information from my Stack Overflow profile to an unknown and untrusted third party.
Is there some way to validate whether the email and URL are genuine?
(If they are genuine, the team at Stack Overflow could do a better job of understanding some of the security issues that some of their users do battle with on a regular basis; I would have expected some kind of on-site notification, banner on my Stack Overflow profile page, or similar had they been genuine.)
From:
header.:(
.That is a joke
figured you were referring to the fact SO didn't use PGP. xD