Like many, I had already thought about the most recent Secret Hack, but was too lazy to think of trying it. I think the key to guarding your identity on Secret, in light of these hack methods, is if using Gmail, to ALWAYS use some derivation of your username with the ‘+’ mechanism.
For instance, instead of:
The email will appear unique to Secret (or any service for that matter), but not unique to Gmail. Added bonus, you can create filters on the incoming email to direct the marketing spam to the bit bucket. I wonder if this email obfuscation would, in effect, turn Secret into a follower/following model rather than the current friend model. Specifically, I follow all the people I’ve ever emailed, but they don’t necessarily follow me.
Though, no matter what course of action security through obscurity is complete bullsh*t.