https://news.ycombinator.com/item?id=48559935

If you dig more you could find the bug, but AFAIK it was that if you sent a large attachment, the bounce email would contain your real address.