Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 28032 - Bugzilla possibly used by spammers to collect email addresses: hide email addresses from unregistered users
Summary: Bugzilla possibly used by spammers to collect email addresses: hide email add...
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Infrastructure
Classification: Unclassified
Component: Bugzilla (show other bugs)
Hardware: All Linux
: High normal
Assignee: Benjamin Coles
URL:
Whiteboard:
Keywords:
: 43714 (view as bug list)
Depends on:
Blocks:
 
Reported: 2003-09-05 22:36 UTC by Reporter
Modified: 2011-10-30 23:14 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Reporter 2003-09-05 22:36:21 UTC
This is the second email address I'm using here in bugzilla that has never been
used anywhere else. And I'm again starting to get drowned in spam who's only
purpose is to spread microsoft viruses. Because bugzilla pages already look
different for registered/unregistered users, would it be possible to show
people's email-addresses only to people with a valid account?
Comment 1 Markus Nigbur (RETIRED) gentoo-dev 2003-10-08 02:48:34 UTC
you could also gather email addresses by parsing all ChangeLogs from packages
in portage, so there is no real protection against this.

IMHO spam protection has to be archieved user side, as with spamassassin
or equivalent.
Comment 2 Reporter 2003-10-09 20:15:04 UTC
But listing bugs that changed within the last 9999 days gives hundreds, maybe
thousands of addresses on one single page.

Webforums usually require users to go to a different page to see one single
address, which may be denied without registration.

Changelogs usually have a relatively small number of addresses each; and
most spammers most likely won't bother to install portage and emerge sync
to get them.

(Yes, I know filtering on user side will hide spam; but it does not prevent
it from occuring, so I thought this may be a useful addition.)

Comment 3 rob holland (RETIRED) gentoo-dev 2003-10-17 02:10:19 UTC
No time for gentoo dev stuff right now :(
Comment 4 Benjamin Coles 2003-10-18 19:21:02 UTC
After going over bugzilla @ bugzilla.org it says there are simple things
in place to prevent spammers from getting your address... in any case a user
can still login and gain access to all email addresses. Spam crawlers can't
get emails as it stands. Maybe in the future I'll visit this again if bugzilla
comes up with a better solution to mask emails.
Comment 5 Benjamin Coles 2004-03-04 13:42:28 UTC
*** Bug 43714 has been marked as a duplicate of this bug. ***
Comment 6 matthias bernges 2004-07-30 02:45:30 UTC
I don't know muck about bugzilla but as seen here http://www.bugzilla.org/features/#eam it supports the protecting of eMail-adresses so it's probably just a thing of configuration. I would be pleased if you change this.