[Bf-committers] Probe Message Privacy Issue

[Aaron Carlisle]

Gotta love mailman :)

On Wed, Feb 28, 2018 at 11:01 PM, Jeffrey H <italic.rendezvous at gmail.com>
wrote:

> Mailing list subscribers are already exposed on the list member page on
> lists.blender.org. I am unsure if they page is protected by a script, but
> they are available to anyone to see in a browser.
>
> On Feb 28, 2018 3:37 PM, "Harley Acheson" <harley.acheson at gmail.com>
> wrote:
>
> > Hello,
> >
> > I just got a message from the list manager with a subject of
> "Bf-committers
> > mailing list probe message"
> >
> > I certainly understand the process and reason for the message. However,
> the
> > contents *exposes* the email addresses of all the 50 members listed to
> each
> > other.  Yes, the message that came to me lists my own email address
> > alongside 49 others.
> >
> > Not that I care that anyone here knows my email address. But normally
> > organizations don't publish lists of addresses like this. It could be
> used
> > for spam, or could be used to make an unofficial list server, as
> examples.
> >
> > As for the message itself, it appears that these indicate bounces from
> the
> > mail servers of Google bouncing messages from Yahoo because of an issue
> > with Yahoo's 550-5.7.1 DMARC policy. It looks like the message includes
> 50
> > address as a maximum number as it appears to be an alphabetically-sorted
> > list of gmail addresses from a-j.
> >
> > Not a big issue, but thought you should know.
> >
> >
> > Cheers, Harley
> > _______________________________________________
> > Bf-committers mailing list
> > Bf-committers at blender.org
> > https://lists.blender.org/mailman/listinfo/bf-committers
> >
> _______________________________________________
> Bf-committers mailing list
> Bf-committers at blender.org
> https://lists.blender.org/mailman/listinfo/bf-committers
>



-- 
Aaron Carlisle

Picture taker | Bit cruncher | Pixel pusher | Document writer | Artist
Project administrator for the Blender 3D Documentation Project