Hacker News new | past | comments | ask | show | jobs | submit login

Just received the same email, and had the same experience as you. Servers are not responding.

Now I'm no longer using Trello as I moved to tasksinabox.com 2 years ago, but I don't see why the information I have there should suddenly be transferred to a company, out of my control and without my permission, just because somewhere there is an email address with a company domain name attached.

I understand the old "lure shadow IT users in with a 'free' service, then offer IT to take back control at a price" scheme, it's a bit of a dark pattern, but then the per-existing users should have the option to opt out of the retroactive appropriation.

I do hope that once the 'confirmation' page comes up, there will be the option to remove the company email from the account, and assign a different address in its place.




Did it actually come from @trello.com?

As I got the same email from @trellis.coffee and assumed it was a phishing attempt.


I'm a former Trello employee - trellis.coffee is the domain the primary dev server is hosted at. It sounds like they failed to excise your email address from the dev database (at least, that's what we did when I worked there).


It's concerning that they're obviously copying production data to a dev database.


Dude you might have leaked private information. Not much really, but still... The dns record show the private addressing of the dev server:

    znpy@eomdb:~$ nslookup trellis.coffee
    Server:  127.0.0.53
    Address: 127.0.0.53#53
    
    Non-authoritative answer:
    Name: trellis.coffee
    Address: 10.253.0.237
    Name: trellis.coffee
    Address: 10.253.3.171
also: dig -t any trellis.coffee


It did indeed come from and links to the trellis.coffee domain.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: