Pavel,

I don't understand.  If you can read issues, you can read the email addresses 
of those who created the issue, those who are CC on the issue, etc.  

What does this list ([email protected]) have to do with it?

As far as I can tell, I can already (on openoffice.org) search for issues by 
email addresses, and I can see the e-mail addresses of anyone linked on an 
issue.  And I don't have to be logged in.  The same is true for the LibreOffice 
bugzilla.

Look at <http://openoffice.org/bugzilla/show_bug.cgi?id=118255>

Mouse-over any of the koschmi links.  You'll see that the mailto: URI is there 
as the target.  Likewise for any other place.  Some of the bugs show email 
addresses in the link text, some show user names.  But all have the e-mail 
address as the target and these are easily captured by scraping the HTML.  E.g.,

    <a class="email" href="mailto:koschmi&#64;openoffice.org";
           title="koschmi&#64;openoffice.org" >
      <span class="fn">koschmi</span >
      </a>

A determined plunderer of e-mail addresses will not be deterred by this.

What is being lost by our having the Test Bugzilla instance and its eventual 
production setup here @i.a.o?

 - Dennis

-----Original Message-----
From: Pavel Janík [mailto:[email protected]] 
Sent: Saturday, August 27, 2011 07:48
To: [email protected]
Subject: Re: OOO Test Bugzilla instance

Hi,

> I can login, all my earlier saved searches available, can create new bug, 
> change bug status from unconfirmed to new and others.
> I can add new post to existing bug.

does this mean that anyone reading this list can reveal real e-mails of every 
OOo IssueZilla user? Hmm, I do not like this...
-- 
Pavel Janík



Reply via email to