HexBrain

Legal Robot · Report #255026

[UX] Notify user on likely email address typo

Validstatus
5upvotes
10 Oct 2017disclosed

Summary

A security researcher let us know about a useful enhancement to our user experience: notify users when we find a likely typo in an email address, for example, [email protected] likely has a transposition of the a and the m in gmail.com. While it is impossible to check every domain, we can catch a significant number of typos by checking the top public email services like Gmail, Yahoo Mail, Hotmail, Outlook, and various ISP emails, which could save some of our users a few frustrating minutes.

It is unusual for bug bounty programs to award a bounty for reports like this, but we felt that @ashishag29's contribution made our service more secure and wanted to recognize that work. In addition, this report was prematurely closed and @ashishag29 showed patience and worked with us to help us understand the issue so we decided to award a bonus as well.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original