maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Community (https://talk.maemo.org/forumdisplay.php?f=16)
-   -   Bugzilla members' security? Publication of email addresses leads to spam? (https://talk.maemo.org/showthread.php?t=6377)

Mara 2007-05-17 14:43

Bugzilla members' security? Publication of email addresses leads to spam?
 
I recently created account with the Maemo Bugzilla and have noticed that the login user ID (email address) is shown to anybody who have logged in to the Bugzilla. I'm just wondering if that is the reason why during the last few weeks I have received a lot more spam emails than before... Because of this, I think Bugzilla is a goldmine for spambots to harvest working email addresses!!! :eek:

I was trying to see if there is a way to change the user ID to something else than email address but could not find it. :mad:

Anybody, any comments?

Milhouse 2007-05-18 01:21

Re: Bugzilla members security?
 
It's being addressed as we speak - email addresses will be hidden as a priority precisely because there have been verifiable cases of harvesting.

Currently I believe bugzilla is closed unless you have a valid account, ie. it's not currently open to anonymous access but such access will be permitted once patches have been applied that anonymise users. No ETA yet, but it's recognised as being a high priority issue.

https://bugs.maemo.org/show_bug.cgi?id=1383

wizbowes 2010-03-08 13:45

What? Bugzilla uses my email address as my ID?
 
How do I cancel my bugzilla account and remove my details?

You sign up by providing you email address which is fine for the system admins to know. Didn't realize that my private email address would now be plastered on the fricking site and used as a username. There was no obvious warning - I was expecting to be able to select a propoer username.

I'm all for community but this is just plain ******ed and I want that account deleted ASAP. How do I do it - it's not obvious?

noobmonkey 2010-03-08 13:48

Re: WTF - Bugzilla uses my email address as my id?
 
you probably need to email the bugzilla team. there is a link at the bottom of every bugzilla page.

floffe 2010-03-08 13:51

Re: WTF - Bugzilla uses my email address as my id?
 
If you set a "real name" (obviously it can be fake) in the preferences, the email will only be shown for logged in users.

Andre Klapper 2010-03-08 15:45

Re: What? Bugzilla uses my email address as my ID?
 
Quote:

Originally Posted by wizbowes (Post 559874)
Didn't realize that my private email address would now be plastered on the fricking site and used as a username.

Set a realname in the preferences. Log out and check yourself if your email address is displayed. Or not.

Quote:

Originally Posted by wizbowes (Post 559874)
There was no obvious warning - I was expecting to be able to select a propoer username.

Feel free to file an upstream request for this in Bugzilla's Bugzilla at bugzilla.mozilla.org, if it does not exist yet.

Quote:

Originally Posted by wizbowes (Post 559874)
I want that account deleted ASAP.

Accounts cannot be deleted (and it makes no sense anyway). You could disable it though.

noobmonkey 2010-03-08 16:16

Re: What? Bugzilla uses my email address as my ID?
 
Quote:

Originally Posted by Andre Klapper (Post 560066)
Accounts cannot be deleted (and it makes no sense anyway). You could disable it though.


Erm, Can not or will not?

I think anyone has the right (legal or otherwise) to be fully removed from sites if they wish? especially open source led ones? (Sounds micro-facebook'softed, that sentence)

I'd feel a bit peeved if i knew that there was no way for me to remove myself...

I do understand it would screw up parts, but could the system not realise that and place "Removed User" in it's place?

tnhh 2010-03-08 16:20

Re: What? Bugzilla uses my email address as my ID?
 
Quote:

Originally Posted by Andre Klapper (Post 560066)
Accounts cannot be deleted (and it makes no sense anyway). You could disable it though.

Huh? Of course it makes sense. And it is a legal requirement under the Data Protection Directive. Just look at all the trouble that Facebook got into about not letting people delete accounts.

Andre Klapper 2010-03-08 16:22

Re: What? Bugzilla uses my email address as my ID?
 
Quote:

Originally Posted by noobmonkey (Post 560125)
I think anyone has the right (legal or otherwise) to be fully removed from sites if they wish?
I do understand it would screw up parts, but could the system not realise that and place "Removed User" in it's place?

See the upstream ticket: https://bugzilla.mozilla.org/show_bug.cgi?id=392184

TA-t3 2010-03-08 17:16

Re: What? Bugzilla uses my email address as my ID?
 
Seeing as that upstream ticket has been going on since 2007, it's not very useful. And in any case it's not right to redirect a legal issue (which this really is, I can only agree with the previous poster) to a technical one.


All times are GMT. The time now is 15:58.

vBulletin® Version 3.8.8