Summary: | Bugzilla possibly used by spammers to collect email addresses: hide email addresses from unregistered users | ||
---|---|---|---|
Product: | Gentoo Infrastructure | Reporter: | Reporter <hans.w.wurst> |
Component: | Bugzilla | Assignee: | Benjamin Coles <sj7trunks> |
Status: | RESOLVED WONTFIX | ||
Severity: | normal | CC: | mr_bones_, pYrania |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Reporter
2003-09-05 22:36:21 UTC
you could also gather email addresses by parsing all ChangeLogs from packages in portage, so there is no real protection against this. IMHO spam protection has to be archieved user side, as with spamassassin or equivalent. But listing bugs that changed within the last 9999 days gives hundreds, maybe thousands of addresses on one single page. Webforums usually require users to go to a different page to see one single address, which may be denied without registration. Changelogs usually have a relatively small number of addresses each; and most spammers most likely won't bother to install portage and emerge sync to get them. (Yes, I know filtering on user side will hide spam; but it does not prevent it from occuring, so I thought this may be a useful addition.) No time for gentoo dev stuff right now :( After going over bugzilla @ bugzilla.org it says there are simple things in place to prevent spammers from getting your address... in any case a user can still login and gain access to all email addresses. Spam crawlers can't get emails as it stands. Maybe in the future I'll visit this again if bugzilla comes up with a better solution to mask emails. *** Bug 43714 has been marked as a duplicate of this bug. *** I don't know muck about bugzilla but as seen here http://www.bugzilla.org/features/#eam it supports the protecting of eMail-adresses so it's probably just a thing of configuration. I would be pleased if you change this. |