Skip to main content

The '+' Email Trick

· 3 min read

"The '+' Email Trick: How to Track Spam and Filter Your Fitness Subscriptions"

We’ve all been there. You sign up for a new gym membership, order a tub of protein from an online fitness store, or download a "free" workout PDF, and boom—two weeks later, your inbox is flooded with spam.

But what if you could track exactly who leaked or sold your email address? And better yet, what if you could automatically filter those emails without changing your inbox?

There is a dead-simple power-user feature built into Gmail, Outlook, and iCloud that you should start using today. It’s called Plus Addressing (or sub-addressing).

Here is how it works and how to set it up in 5 seconds.


The Trick: Just Add a "+"

The concept is incredibly simple: your email provider ignores anything written after a plus sign (+) in the username, but still delivers the mail to your main inbox.

If your standard email is [email protected], you can modify it on the fly whenever you sign up for a new service:

To the website's database, this looks like a completely unique email address. But to Google or Microsoft, it’s just you. Every single email sent to those modified addresses will land right in your main inbox.


Why This is a Game-Changer

1. Spot Data Leaks Instantly

If you start receiving shady emails about crypto or sketchy supplements, just click on the email details and look at the "To:" field. If the email was sent to [email protected], you know exactly who leaked, lost, or sold your data.

2. Effortless Inbox Automation

Instead of manually sorting your emails, you can set up automatic rules (filters) in your email client.

For example, you can create a rule that says:

"If an email is sent to [email protected], automatically apply the 'Supplements' label and bypass the primary inbox."

This keeps your inbox clean and ensures your focus goes to what actually matters.


Are There Any Downsides?

While it works on 99% of modern websites, a few poorly coded forms might tell you that the + character is an "invalid email format."

If you are an Apple user with an iCloud+ subscription, you can bypass this completely by using the native "Hide My Email" feature, which generates a completely random, anonymous email alias for every site you visit.

Summary

Stop giving away your raw email address. Next time you grab a discount code or sign up for a fitness newsletter, just drop a + and the name of the site. It takes zero effort and gives you total control over your digital footprint.

My Experience with NCQ Errors

· 3 min read

What started as a normal day in my homelab turned into hours of debugging, unexpected freezes, and a long chain of NCQ timeout errors coming from my Seagate Exos 12TB drive. I swapped cables, changed power supplies, rebooted the system dozens of times — nothing seemed to fix it. Eventually, I learned the hard way how sensitive enterprise HDDs can be to power stability and controller behavior.

ITIL v4 Foundation

· 3 min read

ITIL® v4 Foundation is one of the most recognized standards in IT Service Management (ITSM). Understanding its terminology, key principles, and the Service Value System is crucial for anyone working in or aspiring to work in IT, as it helps improve service efficiency, quality, and alignment between IT and business.

With the right study approach you can prepare for and pass the certification quickly, without sacrificing real understanding.

Secure Sharing

· 3 min read

In today’s digital world, the way we share passwords and sensitive files is just as important as how we protect them. Unfortunately, too many people still rely on email, chat, or even screenshots to transmit credentials—methods that are not only outdated, but dangerously insecure.

Imagine sending a password through email. If someone gains access to that inbox weeks or even months later, the secret is still there, waiting. This is exactly why temporary links—with built-in expiration and one-time view limits—are becoming the new standard for secure sharing.

Self host services

· 7 min read

1. Intro

In an era where digital services are integral to daily life, self-hosting emerges as a compelling alternative to relying solely on third-party providers. By deploying services on personal or organizational servers, individuals and businesses gain enhanced control over their data, ensuring it remains local and private. This autonomy allows for tailored configurations and robust security measures, aligning with specific privacy requirements. However, it's crucial to recognize that the responsibility for data protection rests with the user; without diligent security practices, self-hosted data can be vulnerable.

Therefore, while self-hosting offers significant privacy advantages, it necessitates a commitment to maintaining a secure environment to safeguard sensitive information.

S3 Storage with Minio

· One min read
hdd

It all started with the idea of ​​having a sort of big container where I can store all my backups that come from Proxmo, NAS or whatever. Here I found the solution with Minio. I integrated this part in my article about Truenas. In fact I integrated Minio right on TrueNas. click here! 😉

CSaaS

· 2 min read

Cyber Security as a Service

Cyber Security as a Service (CSaaS) is a cloud-based model where cybersecurity solutions are provided to businesses as a service by a third-party provider. Instead of maintaining in-house cybersecurity infrastructure, companies can outsource services like threat monitoring, vulnerability management, incident response, and data protection.

This scalable, subscription-based approach allows organizations to access expert-level security without needing to invest heavily in specialized tools or personnel. So, CSaaS helps improve security posture while being flexible and cost-effective, especially for small to medium-sized enterprises.

Below I have tried to outline a bit of all the roles I have found in this service 😉

Security.txt file

· 3 min read

The Importance of security.txt in Web Security

In the ever-evolving landscape of cybersecurity, ensuring that vulnerabilities are discovered and addressed in a timely and responsible manner is critical. One of the most straightforward yet effective tools in promoting such transparency and responsibility is the security.txt file. This simple text file, akin to a robots.txt, offers a direct way for ethical hackers and security researchers to communicate security concerns or vulnerabilities they discover on your website.

PM2

· 3 min read

Advanced, production process manager for Node.JS

PM2 is a production-grade process manager for Node.js applications. It run applications in the background (as daemons), automatically restarts them if they crash, and manages multiple applications on a single server.

It not only simplifies process management but also provides a comprehensive set of advanced monitoring tools. Here’s a detailed overview based on the experience and screenshots you provided.

The free version is quite limited but I think it could be interesting.

Proxmox Config Backup

· 2 min read

Automating Proxmox Config Backup with Systemd and Synology Active Backup

After reading this insightful thread on the Proxmox forum: Backup Cluster Config (pmxcfs /etc/pve), I was inspired to create an automated backup solution for my Proxmox configuration.

I decided to implement a systemd script that automates the backup of the Proxmox sqlite database that contains the cluster configuration.
Here is the script I came up with: