"I don't need to have the emails but what if somebody w/o account at WP would like to use this?"
They can create an account? Tools should serve Wikimedia users, personally I don't see an account as undue burden on them. "Well, username is *also* a private information according the page MarcoAurelio linked, so I would need to solve it anyway." I assume any implementation of this tool will need some form of "account creation" and the terms will be necessary, but I do see list of users signed up to the tool as not nearly as sensitive as a list of email addresses associated with Wikimedia users. Cheers, Chico Venancio Cloud Services Technical Support Em 10 de fev de 2018 09:40, "Martin Urbanec" <[email protected]> escreveu: > Well, username is *also* a private information according the page > MarcoAurelio linked, so I would need to solve it anyway. I don't need to > have the emails but what if somebody w/o account at WP would like to use > this? > > M. > > so 10. 2. 2018 v 13:37 odesílatel Francisco Venancio < > [email protected]> napsal: > >> Martin, >> Do you need the users' emails or sending them email messages enough? >> >> MediaWiki api could be used to send emails to users that have email set >> in their preference. >> >> See https://www.mediawiki.org/wiki/API:Emailuser >> >> Chico Venancio >> Cloud Services Technical Support >> >> Em 10 de fev de 2018 09:27, "Martin Urbanec" <[email protected]> >> escreveu: >> >> >> >> so 10. 2. 2018 v 13:23 odesílatel Guilherme Gonçalves < >> [email protected]> napsal: >> >>> Hi Martin, >>> >>> I'm not authoritative on PII policies at all, but here's a couple of >>> things that came to mind as I read your question. >>> >>> 2018-02-10 11:26 GMT+00:00 Martin Urbanec <[email protected]>: >>> >>>> To prevent this tool from spamming I of course require its confirmation >>>> by accessing an URL with a random string (MD5 hash of user's email >>>> *and* random number from 1 to 100; I mean, those two things are in one >>>> hash). >>>> >>> >>> Does this mean the URL for a given email address can be guessed in at >>> most 100 attempts by someone who doesn't control the address? I think you'd >>> typically want to draw your random numbers from a much larger range, or use >>> as token something that was encrypted or signed with a secret only your >>> server knows. It would probably also make sense to make your URLs valid for >>> only a certain time. >>> >> >> *1000, but increased to 10 000 000, which should be big enough. I also >> can use more qualit hash than MD5 which will slow it down even more. >> >>> >>> However... >>> >>> >>>> Should I stop with collecting mails at all and use some WMF-maintained >>>> service for mass-emailing (mailman at lists.wikimedia.org maybe?) and >>>> make the tool to just send an email to the list itself? >>>> >>> >>> If creating a single mailing list is an option (for instance, you don't >>> plan on customizing the emails per user), this seems like a very good way >>> to go. >>> >> >> It is, this just was the easiest way for me when I was writing the tool. >> >>> >>> >>>> >>>> This question came to my mind before creating, so I do appologize for >>>> asking after programming. >>>> >>>> Best regards, >>>> Martin Urbanec >>>> -- >>>> Můj kalendář najdete na https://martin.urbanec.cz/calendar.html >>>> >>>> _______________________________________________ >>>> Wikimedia Cloud Services mailing list >>>> [email protected] (formerly [email protected]) >>>> https://lists.wikimedia.org/mailman/listinfo/cloud >>>> >>> >>> >>> >>> -- >>> Guilherme P. Gonçalves >>> _______________________________________________ >>> Wikimedia Cloud Services mailing list >>> [email protected] (formerly [email protected]) >>> https://lists.wikimedia.org/mailman/listinfo/cloud >> >> -- >> Můj kalendář najdete na https://martin.urbanec.cz/calendar.html >> >> _______________________________________________ >> Wikimedia Cloud Services mailing list >> [email protected] (formerly [email protected]) >> https://lists.wikimedia.org/mailman/listinfo/cloud >> >> >> _______________________________________________ >> Wikimedia Cloud Services mailing list >> [email protected] (formerly [email protected]) >> https://lists.wikimedia.org/mailman/listinfo/cloud > > -- > Můj kalendář najdete na https://martin.urbanec.cz/calendar.html > > _______________________________________________ > Wikimedia Cloud Services mailing list > [email protected] (formerly [email protected]) > https://lists.wikimedia.org/mailman/listinfo/cloud >
_______________________________________________ Wikimedia Cloud Services mailing list [email protected] (formerly [email protected]) https://lists.wikimedia.org/mailman/listinfo/cloud
