From owner-freebsd-questions@FreeBSD.ORG Fri Apr 10 13:31:31 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3C797BC3 for ; Fri, 10 Apr 2015 13:31:31 +0000 (UTC) Received: from mail-ie0-x22d.google.com (mail-ie0-x22d.google.com [IPv6:2607:f8b0:4001:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 015E18B0 for ; Fri, 10 Apr 2015 13:31:31 +0000 (UTC) Received: by iedfl3 with SMTP id fl3so19451339ied.1 for ; Fri, 10 Apr 2015 06:31:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=PFAEM2kHV1O3HzYKWYNbxJ4JJTMZJ4kFqAGLIINM4DM=; b=IY4JLMdbtNdhWXiPfzOAqHkcwXjJlHWAdCG+i7xa6Z8x6aqKzBdyVzULOT6vDZktUS XiBm+ypTfNs6R+i0kD/ltFCm9xbCpBXjkSzupqRkYs/L96dsLBSkx+fsS95KS5UnTf3L dsHJA3nN7wLxmiv/JsDJ2CJcMIsSdDAs9jX8R1mbdPOB0zii+ygyg7yAc9fT1tZ3lQ5j yRQwV2vGiPOCpmnZYJ+Z0tjoZZIFLWKDMjXFlnuZ4Ww7FzGYbXXegzRpBhju/6vJYJxn Ad89is4rres4GsVwdcDXHJxfwME3iOjht/hpmB+VjixgqJz89372vsj4d9daAvjkESnL XRtg== X-Received: by 10.107.129.22 with SMTP id c22mr2555898iod.81.1428672690507; Fri, 10 Apr 2015 06:31:30 -0700 (PDT) Received: from [10.0.10.5] (cpe-76-190-244-6.neo.res.rr.com. [76.190.244.6]) by mx.google.com with ESMTPSA id gz4sm10682518igb.19.2015.04.10.06.31.29 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 10 Apr 2015 06:31:29 -0700 (PDT) Message-ID: <5527D0BD.8060401@gmail.com> Date: Fri, 10 Apr 2015 09:31:41 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: FreeBSD Questions Subject: email address being harvested from ports website Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 13:31:31 -0000 Hello list; I maintain 4 ports and within the last 6 months I have started receiving large amounts of spam on the ports maintainer email address. Last week I went through the process of changing the maintainers email addresses and within 3 days I started receiving spam on the new email addresses. The http://www.freebsd.org/ports/ website is being harvested for email addresses. We all have personally experienced spam email. Now the volunteers who create and maintain the ports in the Freebsd ports collection are being targeted with spam. In todays world of spam emails containing payloads of bots, viruses and mullware, I think its past time for www.freebsd.org/ports/ to stop displaying any email address at all. I release this is only a simple solution targeted at the script kiddies. Any seriously harvester could always download the complete ports tree source and harvest the maintainer email address from the ports Makefile. To address this problem in a way to make it totally go away, a new way of handling the ports maintainers email address in the ports system is fast becoming a priority. Separation of the maintainers email address from the ports Makefile is the ultimate solution. People on the ports team who know the behind scenes workings of the port system are far better suited to develop a new method of accomplishing this. Lets look at this in a different way. I believe that email address are consitered as private personal information and covered under the privacy information U.S. law which says they can not be exposed to the public. This post is intended to generate discussion and shine light on what may be a legal oversight by the ports team. Thank you in advance for you interest and comments.