[Bf-committers] Probe Message Privacy Issue

[Dalai Felinto]

Hi,

> For bf-committers, that option is off btw.
Yup, but even for bf-cycles this option is on.

So let's just close them all and move on?

I also got the "probe" email by the way. But again, if it exposes only the
email of list members that have posted (or tried to post) something, it is
ok-ish.

Cheers,
Dalai

--
blendernetwork.org/dalai-felinto
www.dalaifelinto.com

2018-03-01 16:02 GMT-03:00 Ton Roosendaal <ton at blender.org>:

> Hi,
>
> > Mailing list subscribers are already exposed on the list member page on
> > lists.blender.org. I am unsure if they page is protected by a script,
> but
> > they are available to anyone to see in a browser.
>
> I don't know what you mean with this. How?
> No list should expose its subscribers to everyone, and I never configured
> this in the past to allow that.
>
> For bf-committers, that option is off btw.
>
> What we DO expose is the mail address of someone who mails to this this
> list,
> That's something I really prefer to keep.
>
> -Ton-
>
> --------------------------------------------------------
> Ton Roosendaal  -  ton at blender.org   -   www.blender.org
> Chairman Blender Foundation, Director Blender Institute
> Entrepotdok 57A, 1018 AD, Amsterdam, the Netherlands
>
> > On 1 Mar 2018, at 05:01, Jeffrey H <italic.rendezvous at gmail.com> wrote:
> >
> > Mailing list subscribers are already exposed on the list member page on
> > lists.blender.org. I am unsure if they page is protected by a script,
> but
> > they are available to anyone to see in a browser.
> >
> > On Feb 28, 2018 3:37 PM, "Harley Acheson" <harley.acheson at gmail.com>
> wrote:
> >
> >> Hello,
> >>
> >> I just got a message from the list manager with a subject of
> "Bf-committers
> >> mailing list probe message"
> >>
> >> I certainly understand the process and reason for the message. However,
> the
> >> contents *exposes* the email addresses of all the 50 members listed to
> each
> >> other.  Yes, the message that came to me lists my own email address
> >> alongside 49 others.
> >>
> >> Not that I care that anyone here knows my email address. But normally
> >> organizations don't publish lists of addresses like this. It could be
> used
> >> for spam, or could be used to make an unofficial list server, as
> examples.
> >>
> >> As for the message itself, it appears that these indicate bounces from
> the
> >> mail servers of Google bouncing messages from Yahoo because of an issue
> >> with Yahoo's 550-5.7.1 DMARC policy. It looks like the message includes
> 50
> >> address as a maximum number as it appears to be an alphabetically-sorted
> >> list of gmail addresses from a-j.
> >>
> >> Not a big issue, but thought you should know.
> >>
> >>
> >> Cheers, Harley
> >> _______________________________________________
> >> Bf-committers mailing list
> >> Bf-committers at blender.org
> >> https://lists.blender.org/mailman/listinfo/bf-committers
> >>
> > _______________________________________________
> > Bf-committers mailing list
> > Bf-committers at blender.org
> > https://lists.blender.org/mailman/listinfo/bf-committers
>
> _______________________________________________
> Bf-committers mailing list
> Bf-committers at blender.org
> https://lists.blender.org/mailman/listinfo/bf-committers
>