A researcher bought noreply.net. Companies started sending him secrets.

Security researcher Cory Solovewicz purchased 'noreply' domains and discovered that companies frequently send sensitive private data to these addresses by mistake. This highlights a significant security oversight where organizations treat 'no-reply' email addresses as digital trash cans without considering data privacy risks.