incubator-ooo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dennis E. Hamilton" <>
Subject RE: OOO Test Bugzilla instance
Date Sat, 27 Aug 2011 17:14:54 GMT

I don't understand.  If you can read issues, you can read the email addresses of those who
created the issue, those who are CC on the issue, etc.  

What does this list (ooo-dev@i.a.o) have to do with it?

As far as I can tell, I can already (on search for issues by email addresses,
and I can see the e-mail addresses of anyone linked on an issue.  And I don't have to be logged
in.  The same is true for the LibreOffice bugzilla.

Look at <>

Mouse-over any of the koschmi links.  You'll see that the mailto: URI is there as the target.
 Likewise for any other place.  Some of the bugs show email addresses in the link text, some
show user names.  But all have the e-mail address as the target and these are easily captured
by scraping the HTML.  E.g.,

    <a class="email" href="mailto:koschmi&#64;"
           title="koschmi&#64;" >
      <span class="fn">koschmi</span >

A determined plunderer of e-mail addresses will not be deterred by this.

What is being lost by our having the Test Bugzilla instance and its eventual production setup
here @i.a.o?

 - Dennis

-----Original Message-----
From: Pavel Janík [] 
Sent: Saturday, August 27, 2011 07:48
Subject: Re: OOO Test Bugzilla instance


> I can login, all my earlier saved searches available, can create new bug, change bug
status from unconfirmed to new and others.
> I can add new post to existing bug.

does this mean that anyone reading this list can reveal real e-mails of every OOo IssueZilla
user? Hmm, I do not like this...
Pavel Janík

View raw message