Fwd: Email visible to all

[Richie Bloss]

Yeah, it's always great to get insulted when posting to Linix forum =
"unlike you".

If these are the hoops we are expected to jump thru in order to post to the
Ubuntu mailing lists then count me out.

This will be my last post to this list since apparently I will have to wait
2 & 1/2 years for it roll off the archive logs.

---------- Forwarded message ----------
From: sd <superduper3000 at outlook.com>
Date: Thu, Aug 21, 2014 at 10:16 AM
Subject: Re: Email visible to all
To: lubuntu-users at lists.ubuntu.com


 I also no dot like my email to be visible in the web mail list. However,
unlike you, I looked and got informed first before I joined the mail list -
then I created a funny email address at outlook.com (which you can see)
that I use only for this list.

Outlook.com blocked this email address once last year. I could see all my
emails and receive emails from this list, but they did not allow me to send
emails (so I could not respond). I  had to go one month over microsoft
email support to get back access. They told me it was somehow compromised -
however there were no emails send from or deleted from it. I guess someone
had guessed the password or something like that given my initial password
was relatively weak.

Once they restored my full access, I changed the password to a random
string of maximum allowed length. My desktop email client remembers the
random password. So it could be that just by using this list your email
gets compromised if you password is weak.

Anyway even if they remove your email from the web, a spammer could in
theory be also a (respectable :) member of this list and can still see all
emails via the email program. The best would the mail list software does
not send the emails at all, but it is too much I think to ask them change
it. The email are also referenced by the email program when you reply, so
your email now ends up also in the message body text (I put ... for your
email in the quoted text in this answer :).


On 20/08/14 21:45, Richie Bloss wrote:

 Thanks I will work this from a different angle & try to contact someone
from the main lists page, perhaps they can remove references to my
name/email.

 Open shouldn't mean avail for spammers to grab your email.


On Tue, Aug 19, 2014 at 6:00 PM, ∅ <ca .... @yahoo.com
<carsrcoffins23 at yahoo.com>> wrote:

> > I am
> > concerned that a security hole is present.
>
> It seems this is not consistent with the definitions one can find, such as:
> https://en.wikipedia.org/wiki/Security_hole
>
> > When I did a Google search on my name yesterday an old post to the
> *mailing
> > list * dated 7/22/2013 appeared with my gmail id.
>
> It's obfuscated. Spammers are not likely to make much use out of it.
>
> If you're trying to hide your email from the Internet, then that may
> be a problem, but that's totally consistent with the ENTIRETY of
> Ubuntu's mailing lists. If you have a problem, you need to bring it to
> Ubuntu as a whole. There are ways around this given the software used
> (mailman), but it's not Lubuntu's fault. You should look at the main
> lists page and find some people to contact there:
> https://lists.ubuntu.com/
> (yes, all those lists have this problem)
>
> > Also I can access the The Lubuntu-users Archives without any login
> process
> > & my along all other email (gmail) addresses is there for anyone to see.
> >  This seems like a large breach in security to me.  Am I incorrect?
>
> This is the default for mailman, actually. Not hard to fix, but it
> does need to be applied universally and Ubuntu as a whole would need
> to agree with it.
>
> Good luck,
> wxl
>





--
Lubuntu-users mailing list
Lubuntu-users at lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/lubuntu-users/attachments/20140821/1008f220/attachment-0001.html>