Author's Note: There are a couple of similar questions, but in both cases the answers cannot apply here.
- This question not a duplicate of: Is my email address accessible?
The answer given there: "The recruiter must have got your e-mail from somewhere else" doesn't apply in this case.- This question not a duplicate of: Recruiter claims to have gotten my email address from Stack Overflow
The accepted answer in that case was that "the recruited was given the email by a (human) third party that the OP had corresponded with." That does not apply in my case.The situation described in that post was different. Specifically that questioner had given the email to at least 1 third party, and the discussion focussed around the fact the third party presumably passed it on. I hadn't given the email to anyone else, and the information people offered here about the gravatar hash seems to be the only plausible explanation. My opinion is that questions that have different answers must be different questions. However the closure is probably unimportant now: I think this question has probably garnered as much helpful information from the mods and staff (and others) as is possible.
Is it possible for any third party to obtain my email address used to register for SO? I ask because I've today started receiving spam emails, coding related, sent to that address. However the address isn't used for any other purpose.
Details:
When registering with any site or company I use a unique email address of the form [email protected]. All email sent to [email protected] redirects to my real email by default, unless I specifically block individual addresses. When I registered here I used [email protected]. My sign-up on here was using email and password, not using one of the third party logins such as google or facebook. [email protected] has never been used elsewhere.
I've never corresponded with anyone on here using it (I can't even send from the address). I've never signed up elsewhere with that address. I don't use any sites linked to SO, such as the careers.
As far as I can see that address is only stored by SO, and on my email system. My email is stored locally, and only remains on my ISP's server for a few days. The last legitimate email I have from SO was in Feb 2013. I've previously received 2 sign-up emails, 1 from SO regarding the careers site and 2 when I reset my password.
Could the email have been harvested from my email system? It seems unlikely, since even if I had a security problem on my local computer, it would be remarkable that only that one email address, last used 3 years ago, was the only one targeted. And further that some scammer linked the address to SO, and sent coding related spam. In my experience coding related spam is rare: more often it's helpful people warning me about a problem with my bank account.
Could the address have been harvested from some intermediate server which handled a previous email sent to me at [email protected]? Same answer really: I couldn't answer technically, but finding a 3-year old address and sending appropriate spams to it seems surprising.
[email protected]
and have started receiving coding-related E-Mail exactly to that address recently? Might be worth taking up with[email protected]
site:stackoverflow.com
just to exclude the possibility it's there after all somewhere, in a piece of code or something