[Freeciv-Dev] [bug #17747] Reassigned to another tracker [was: Your gna installation leaks private emails.]
Follow-up Comment #7, bug #17747 (project freeciv): 1) The system really does send an email to the given address, and furthermore anyone who adds a comment will get an email that has a CC: of everyone who contributed to the discussion. So yeah, you now have my email address. Perhaps we can coax GNA to use a BCC: instead? That's the only thing i can think of that won't stifle discussion... 2) I didn't test it right now, but IIRC the banner on the web page displays a username [if Savane has one available] instead of the naked email address. If so, then posting anonymously is less secure than creating an account - the system has no other way to refer to you than by your address. 3) Similarly, bug reports always display the username of the original submitter. Where the name is 'None' [i.e., anonymous] then the additional field called Originator Email is also displayed, because we simply have to have some way to contact the OP. AFAIK, these tracker items never go away even when closed - your address is attached to this item more or less forever. 4) The web page banner is sent in a 'private' packet from the server to your browser. While it is certainly possible for that packet to be intercepted, it should be far easier for a cracker to access the email with all of our addresses in it. I suggest that is the area that could use the most attention from the administrators. 5) Right now this is being sent inside a HTTPS session. IDK if this is also true for 'anonymous' posts. 5) The project does have some responsibility for the privacy of it's community members, but arguably those users have as much or more responsibility for their own privacy. The moral of this story is that not having an account is inherently less secure than having one. If you insist on being 'anonymous' then you would be better served by getting an additional free email address and use that address only with the project. ___ Reply to this item at: http://gna.org/bugs/?17747 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #17747] Reassigned to another tracker [was: Your gna installation leaks private emails.]
Follow-up Comment #8, bug #17747 (project freeciv): (OP here) 1) I'm not referring to the CC in the email, although admittedly BCC would be a nice idea, too. 2) I *was* referring to anonymous bug reports. I as another anonymous can find the first anonymous' contact information by just adding a comment to an anonymous bug report. 3) I am not and was not logged in as user. User accounts tend to pile up and rot plus have a tendency to have unsafe shared passwords - the fewer the better. It would be nice if gna respected this. ANYWAYS: I don't mind if the people from the project see my contact info. Not at all. They need it. If you're logged in and have this bug report assigned, by all means, do contact me. But if I am NOT logged in and don't have anything to do with the bug report, just by submitting a comment, I shouldn't be able to find out the originator's email. 4) I am not concerned about anyone intercepting this. I am concerned about a third party coming along, and adding a comment to a bug report just to find out who reported it. It's no big deal, but it's a very unexpected way of exposing one's email address, if the rest of the bug reports give you the impression that the email is actually not shared (see, e.g., the cc list, where the anonymous originator's is NOT displayed, as well as other places that give you the impression there's been some effort to guard the email address) 5) HTTPS or not is not and was never the concern. second 5) well, fix that. I shouldn't need an account to retain privacy just because I find a bug in project XYZ and me idiot takes the time to report it. I don't know how many website / group accounts you have, but I have too many already. Finally) Please have a look at the screenshot I posted. If you can reproduce getting my email displayed anonymously just by adding a comment here, then I continue to claim that this is a bug in GNA. It CANNOT be accepted GNA default operation to spew out its users data - anonymous or not. I understand the points you raised, but most of them are IMO not catching the aspect about which I created the bug report. And also about not pushing out people's email: I'd really appreciate if BUG #18310 got my email address removed from its visible portion. ___ Reply to this item at: http://gna.org/bugs/?17747 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #17747] Reassigned to another tracker [was: Your gna installation leaks private emails.]
Follow-up Comment #9, bug #17747 (project freeciv): Please take your discussion to the reassigned bug #18310 in the Savane project. This is not and never was a bug in Freeciv. ___ Reply to this item at: http://gna.org/bugs/?17747 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2756] Kiribati nation
Update of patch #2756 (project freeciv): Status:None = In Progress ___ Follow-up Comment #2: The colors of the flag were a bit off, I made a new version. Also, isn't the adjective of Kiribati I-Kiribati too? (file #13480) ___ Additional Item Attachment: File name: kiribati.svg Size:19 KB ___ Reply to this item at: http://gna.org/patch/?2756 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2756] Kiribati nation
Follow-up Comment #3, patch #2756 (project freeciv): As I understand it, I-Kiribati is strictly a demonym while Kiribati can be used a general-purpose adjective - at least according to http://en.wikipedia.org/wiki/List_of_adjectival_and_demonymic_forms_of_place_names ___ Reply to this item at: http://gna.org/patch/?2756 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2758] Hephtalite nation
Update of patch #2758 (project freeciv): Status:None = In Progress Assigned to:None = mixcoatl ___ Follow-up Comment #1: Some edits plus an svg flag (file #13481, file #13482) ___ Additional Item Attachment: File name: hephthalite.rulesetSize:1 KB File name: hephthalite.svgSize:1 KB ___ Reply to this item at: http://gna.org/patch/?2758 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2766] Canaanite nation
Update of patch #2766 (project freeciv): Status:None = In Progress Assigned to:None = mixcoatl ___ Follow-up Comment #3: I'm probably wrong but aren't Canaanites and Phoenicians the same people? I've always been under the impression Caananite is just the Biblical name for Phoenician. ___ Reply to this item at: http://gna.org/patch/?2766 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #17137] No useful strings to translate in utility/ioz.c
Update of bug #17137 (project freeciv): Status: Ready For Test = Fixed Open/Closed:Open = Closed ___ Reply to this item at: http://gna.org/bugs/?17137 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #18243] map window displayed incorrectly with gtk+ 2.24.5
Follow-up Comment #8, bug #18243 (project freeciv): In response to my prodding, Gtk upstream said: I think the revert is final, as there were quite a few issues with it, and I don't want to cause with maintenance-only code. That said, I do think something is indeed wrong in your rendering code if it causes FreeCiv to turn black, so looking at the issue probably wouldn't hurt. Who knows what's happening there... So the urgency is off, but we might want to look anyway. Can someone post a screenshot of this issue, so we know exactly what we're talking about? ___ Reply to this item at: http://gna.org/bugs/?18243 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #18243] map window displayed incorrectly with gtk+ 2.24.5
Follow-up Comment #9, bug #18243 (project freeciv): Well, the point of this bug is that there's not much to see... But why not, if only for sake of documenting the problem. Native windows usually didn't require many changes of the code, but perhaps some were necessary in freeciv. (file #13483) ___ Additional Item Attachment: File name: freeciv-gtk-fail.png Size:54 KB ___ Reply to this item at: http://gna.org/bugs/?18243 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #18243] map window displayed incorrectly with gtk+ 2.24.5
Follow-up Comment #10, bug #18243 (project freeciv): Right, so it is specifically the main map view that's blank -- the other parts of the windows (tabs, menubar, side bar) are OK. I've occasionally seen corruption in the main map view at startup, but I've never got it together to raise a bug. I idly wonder if it's somehow related? (If anyone else does see this, please raise a new bug rather than putting it in this one.) ___ Reply to this item at: http://gna.org/bugs/?18243 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2729] Circassian nation
Update of patch #2729 (project freeciv): Status: In Progress = Done Open/Closed:Open = Closed ___ Reply to this item at: http://gna.org/patch/?2729 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2730] Avar nation
Update of patch #2730 (project freeciv): Status: In Progress = Done Open/Closed:Open = Closed ___ Reply to this item at: http://gna.org/patch/?2730 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2751] Cañari nation
Update of patch #2751 (project freeciv): Status: In Progress = Ready For Test ___ Reply to this item at: http://gna.org/patch/?2751 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2752] Bruneian nation
Update of patch #2752 (project freeciv): Status: In Progress = Ready For Test ___ Reply to this item at: http://gna.org/patch/?2752 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2772] A few typos in comments
Update of patch #2772 (project freeciv): Status:None = Ready For Test Assigned to:None = jtn Summary: Typos = A few typos in comments ___ Follow-up Comment #1: Thanks for the contribution. However, on the 2.2.x branch, we're putting up with minor infelicities such as typos in strings for the sake of not disturbing localisations, the translators having by and large moved on to 2.3.x. And on 2.3.x, all the mentioned typos in translatable strings have already been fixed, as it happens. Attached patch has the balance, which are in comments and developer docs. (file #13484) ___ Additional Item Attachment: File name: trunk-S2_3-typos-comments-bis.diff Size:1 KB ___ Reply to this item at: http://gna.org/patch/?2772 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2753] Comorian nation
Update of patch #2753 (project freeciv): Status: In Progress = Ready For Test ___ Reply to this item at: http://gna.org/patch/?2753 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [patch #2754] improved Roman nation
Update of patch #2754 (project freeciv): Status: In Progress = Ready For Test ___ Reply to this item at: http://gna.org/patch/?2754 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #17789] Windows client does not give scenario path to forked server
Update of bug #17789 (project freeciv): Operating System:None = Microsoft Windows ___ Reply to this item at: http://gna.org/bugs/?17789 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
[Freeciv-Dev] [bug #17747] Reassigned to another tracker [was: Your gna installation leaks private emails.]
Follow-up Comment #10, bug #17747 (project freeciv): Ironically I can't, because the new bug report doesn't accept anonymous. But we are legion!? ___ Reply to this item at: http://gna.org/bugs/?17747 ___ Message sent via/by Gna! http://gna.org/ ___ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev
