I've been spamming again. Sending out emails to schools, saying how lovely we are etc., etc.. In my referers I see some of the links people have used to get here. If you've clicked a link in your email it'll show up here. Not all are terribly useful to me, sometimes I can make out domain names of schools, sometimes it's just an IP address.

However, with RM's EasyMail and DigitalBrain's webmail system, if I follow the link back I get to the log in page for your account AND see your username! The password isn't there, but it's trivial to keep hitting that page with numerous password attempts till it's cracked—it's a brute force attack. Once in I could read your email, post messages, with DigitalBrain, I'm sure I can also hack many more things, like updating your website, uploading or deleting files...

Obviously, I'm not going to do this. But, if you are with these suppliers please rise up and storm their citadels! Ask them to stop sending your username in referals. Sooner rather than later you'll be hacked and depending what you've got in your emails, you may find your back accounts drained too.