AUR web interface

Tasklist

FS#24668 - Obscure email addresses in user profiles

Attached to Project: AUR web interface
Opened by Stefan (flienteen) - Friday, 10 June 2011, 17:28 GMT
Last edited by Lukas Fleischer (lfleischer) - Saturday, 17 November 2012, 15:12 GMT
Task Type Feature Request
Category Security
Status Closed
Assigned To Lukas Fleischer (lfleischer)
Architecture All
Severity Low
Priority Normal
Reported Version 1.8.2
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Hi. I would like to tell you something, but it is neither about a bug nor a package, so I might send it to the wrong department. I am sorry if it is this case.
I think you should take a look at this page, "aur.archlinux.org/account.php?Action=AccountInfo&ID=XY" . It seems that with a simple script anyone can get the email database of AUR users.
This task depends upon

Closed by  Lukas Fleischer (lfleischer)
Saturday, 17 November 2012, 15:12 GMT
Reason for closing:  Won't implement
Additional comments about closing:  See comments.
Comment by Andrea Scarpino (BaSh) - Friday, 10 June 2011, 18:08 GMT
that works only if you are logged in
Comment by Stefan (flienteen) - Friday, 10 June 2011, 18:23 GMT
yes, but to make an account is not so difficult and it takes less then 30 seconds.
Comment by Andrea Scarpino (BaSh) - Friday, 10 June 2011, 18:29 GMT
what if you need to contact a maintainer by mail?
Comment by Stefan (flienteen) - Friday, 10 June 2011, 19:10 GMT
but there are many ways how to secure the mail and at the same time to be able to contact users..
Comment by Lukas Fleischer (lfleischer) - Tuesday, 21 June 2011, 16:18 GMT
Well, there's no way to allow complete protection without completely hiding the mail addresses. Any obscuration can be undone by a script. It just costs a bit more.
Comment by canyonknight (canyonknight) - Saturday, 17 November 2012, 15:11 GMT
-1 from me on this. Anything done to obscure the e-mail addresses will most likely have little effect on anyone after them and only hurt users.

Loading...