[Webkit-unassigned] [Bug 197687] Tools using bugzilla email lists expose un-truncated and un-obfuscated email addresses
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu May 9 03:21:33 PDT 2019
https://bugs.webkit.org/show_bug.cgi?id=197687
--- Comment #2 from Tobi Reif <tobi at tobireif.com> ---
One specific example:
The bug page:
https://bugs.webkit.org/show_bug.cgi?id=108929
Does not publish my email address.
The message at the original location:
https://lists.webkit.org/pipermail/webkit-unassigned/2013-March/1364285.html
Has my email address, but at least the at-sign is replaced with " at ".
Please make sure the email address gets truncated/obfuscated more strongly (on the whole site webkit.org) (ideally for all email addresses).
The message copy at marc.info:
https://marc.info/?l=webkit-unassigned&m=136360475701428
Contains my email address (you can find it right after "Comment #7 from Tobi Reif") in full, non-obfuscated and non-truncated. It even is featured verbatim in the source of the page - very easy to harvest even for simple spam bots.
Since 2018-02-21 I have sent several emails to the maintainers of marc.info. They have not fixed the issue.
Please make sure that the list admin of "Webkit-unassigned" will soon send a request to the marc.info maintainers https://marc.info/?q=about asking them to immediately obfuscate or/and truncate all instances of my email address on their site which have been fetched from "Webkit-unassigned" (currently all instances of my email address on marc.info are from "Webkit-unassigned"). (Feel free to expand the request to all email addresses fetched from your list/lists.)
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190509/90f1660e/attachment.html>
More information about the webkit-unassigned
mailing list