You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openoffice.apache.org by Mathias Röllig <mr...@gmx.net> on 2015/07/01 14:57:00 UTC
Re: [Q] Question about Mailarchive
Hello Dennis!
Thank you again! Maybe my english is too bad, so we are talking about
different things. Sorry for some misunderstanding.
Let me make a last try.
> As mentioned separately, the email addresses of contributors to the
> Bugzilla are visible to anyone having an account, and that satisfies
> the ASF requirements for transparency.
No problem, I agree.
> Although the HTML files obscure the email addresses, they can still
> be harvested from the raw HTML, and the CC: lists are not obscured at
> all (and are visible to non-subscribers).
Example:
https://bz.apache.org/ooo/show_bug.cgi?id=3560
If I look at the HTML source I can't find any email address. The CC list:
<select id="cc" multiple="multiple" size="5">
<option value="baumux">baumux</option>
<option value="bob-openoffice">bob-openoffice</option>
<option value="bugger_aoo">bugger_aoo</option>
<option value="chris_mux">chris_mux</option>
[…]
Maybe you have looked at a cached version where you was logged in?
> Although email addresses are not strong identifiers of individuals,
> association of email addresses with contributors works well enough
> for Apache purposes, in practice.
Maybe it was my fault to use the word "hide". I better should wrote
"shorten".
Look at your precedent message at
http://mail-archives.apache.org/mod_mbox/openoffice-dev/201506.mbox/%3C009c01d0b351%2419fa95c0%244defc140%24%40acm.org%3E
So you will see that your email address is shortened to
<de...@acm.org>.
My email address inside the quoted text isn't shortened.
Now look at
http://mail-archives.apache.org/mod_mbox/openoffice-issues/201507.mbox/%3Cbug-126388-248469-ZzlQH5cCPb%40https.bz.apache.org%2Fooo%2F%3E
You will see that the sender email address from issuezilla is shortened
to bugzi...@apache.org
But the original sender address from Regina and all other email
addresses inside aren't shortened.
So what I want to know is:
Is there a possibility that all email addresses in mail archive are
shortened, so that no spambot can use it?
(It would be a nice thing if also quoted email addresses in messages in
bugzilla itself for not logged in visitors are shortened.)
I think there should be a possibility and has nothing to do with privacy
statements and in my opinion it would be a good thing for all subscribers.
All things against spambots are good things, isn't it?
Regards, Mathias
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org
RE: [Q] Question about Mailarchive
Posted by "Dennis E. Hamilton" <de...@acm.org>.
With regard to the disclosure of email addresses in various ways via Apache Software Foundation Services, the disclosure of email addresses is rather widespread.
It appears that the MBox option for obscuring e-mail addresses applies only to the From: field of an archived post. There is no obfuscation of email addresses or anything else in the body of a message. In a reply or forwarding, a sender's email address is also likely exposed.
If someone wants to harvest these email addresses, the easiest way is to subscribe to the list and harvest everything in the messages in the form they are forwarded to list subscribers. This is easier and won't reveal itself in the archive-server logs.
- Dennis
-----Original Message-----
From: Mathias Röllig [mailto:mroellig.news@gmx.net]
Sent: Thursday, July 2, 2015 15:40
To: dev@openoffice.apache.org
Subject: Re: [Q] Question about Mailarchive
Hello Andrea!
>> All things against spambots are good things, isn't it?
>
> Still this wouldn't solve the problem, since other mirroring services
> are not guaranteed to conceal addresses.
This will result into the question who owns the data and who have the
right to mirror public the messages. But this is another discussion.
I note that Bugzilla is the first forum for me that post ALL of its
registered usernames and corresponding email addresses via mail archive
to the internet.
Thank you!
Regards, Mathias
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org
Re: [Q] Question about Mailarchive
Posted by Mathias Röllig <mr...@gmx.net>.
Hello Andrea!
>> All things against spambots are good things, isn't it?
>
> Still this wouldn't solve the problem, since other mirroring services
> are not guaranteed to conceal addresses.
This will result into the question who owns the data and who have the
right to mirror public the messages. But this is another discussion.
I note that Bugzilla is the first forum for me that post ALL of its
registered usernames and corresponding email addresses via mail archive
to the internet.
Thank you!
Regards, Mathias
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org
Re: [Q] Question about Mailarchive
Posted by Andrea Pescetti <pe...@apache.org>.
Mathias Röllig wrote:
> Now look at
> http://mail-archives.apache.org/mod_mbox/openoffice-issues/201507.mbox/%3Cbug-126388-248469-ZzlQH5cCPb%40https.bz.apache.org%2Fooo%2F%3E
> So what I want to know is:
> Is there a possibility that all email addresses in mail archive are
> shortened, so that no spambot can use it?
We use the standard Foundation-wide installation of mod_mbox:
http://httpd.apache.org/mod_mbox/
One should ask to the lists listed there to know if it is possible
1) To configure mod_mbox to conceal addresses
2) To enable this configuration on the apache.org instance (this is
better asked to the Infrastructure lists actually)
> All things against spambots are good things, isn't it?
Still this wouldn't solve the problem, since other mirroring services
are not guaranteed to conceal addresses.
Regards,
Andrea.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org