Bug 104580 - email adresses harvested from bugs.freedesktop.org
Summary: email adresses harvested from bugs.freedesktop.org
Status: RESOLVED WONTFIX
Alias: None
Product: freedesktop.org
Classification: Unclassified
Component: Bugzilla (show other bugs)
Version: unspecified
Hardware: All All
: highest critical
Assignee: fd.o Admin Massive
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-11 09:31 UTC by Don't show my email
Modified: 2019-02-16 14:15 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Description Don't show my email 2018-01-11 09:31:20 UTC
Spam Bots are able to harvest emailadresses off bugs.freedesktop.org:


systemdbugzilla@resellerdesktop.de is only used here in this bugzilla. 

Suggestion: 

If not logged in => solve Captcha to show email adresses of bugs.

Proove: 


Return-path: <owyavjz@sunrisem.eu>
Envelope-to: systemdbugzilla@resellerdesktop.de
Delivery-date: Thu, 11 Jan 2018 04:08:07 +0100
Received: from mail.sunrisem.eu ([185.158.113.54])
	by resellerdesktop.de with esmtp (Exim 4.89)
	(envelope-from <owyavjz@sunrisem.eu>)
	id 1eZTDe-0002vJ-9V
	for systemdbugzilla@resellerdesktop.de; Thu, 11 Jan 2018 04:08:06 +0100
Received: from sunrisem.eu (mail.sunrisem.eu [185.158.113.54])
	by mail.sunrisem.eu (Postfix) with ESMTPA id 9E4BB1317786;
	Wed, 10 Jan 2018 23:10:09 +0200 (EET)
Message-ID: <owyavjz05041605.88836712@mail.sunrisem.eu>
Reply-To: "Apotheke" <owyavjz@sunrisem.eu>
From: "Apotheke" <owyavjz@sunrisem.eu>
To: <thomas.nieberle@real-online.de>
Date: Thu, 11 Jan 2018 00:10:15 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
	type="multipart/alternative";
	boundary="----=_NextPart_000_0006_01D38A70.400BED10"
Precedence: bulk
List-Id: b75282648v72075153
X-Complaints-To: abuse@sunrisem.eu
List-Unsubscribe: <http://sunrisem.eu/ru/unsubscribe/do?hash=4456213841765363>
X-Spam-Flag: YES
X-Spam-Score: 6.7 (++++++)
X-Spam-Report: Software zur Erkennung von "Spam" auf dem Rechner
Comment 1 Tollef Fog Heen 2018-01-11 18:34:18 UTC
Yeah, we should probably just not show people's mail addresses at all.
Comment 2 Daniel Stone 2018-03-16 10:26:21 UTC
In the meantime, we do at least have a clear privacy policy (linked from the bottom of all pages on Bugzilla, amongst others) which explains that your email address will be exposed. So that removes the element of surprise.
Comment 3 Daniel Stone 2019-02-16 14:15:25 UTC
We are also moving away from Bugzilla completely, and the read-only archive we have when the last remaining projects have moved away from it will not show email addresses.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.