Please obfuscate AUR user account email addresses.

Xyne · 2008-12-17 16:54:21

I've just noticed that plain email addresses are listed on the AUR user account pages. I haven't posted the email address that I use for the AUR anywhere else in plain format so I suspect that the increasing trickle of spam that I'm getting (relatively new account) is from bots that have harvested the account there (maybe I'm wrong).

Could you please change it to something less bot-friendly such as "user at example dot com" or some other variation, maybe with some invisible html inbetween?

phrakture · 2008-12-17 16:56:21

Could you toss this in the bug tracker, so I can assign it to Loui/Callan ?

rson451 · 2008-12-17 17:03:30

I'm not sure if this would get used or not, but this is what I do to post emails and such on my website:

.obfuscate{
  unicode-bidi: bidi-override;
  direction: rtl;
  letter-spacing: -1.75px;
  font-weight: normal;
}

then the markup (email backwards with an in between each letter):

<span class="obfuscate">t e n . h c e t n o s r   @   y d n a r</span>

Probably overkill, but I think it works so far.

Check http://rsontech.net/contact/ to see it in action.

Last edited by rson451 (2008-12-17 17:04:17)

Daenyth · 2008-12-17 17:21:41

http://bugs.archlinux.org/task/9612 It was closed with a "Won't Fix"

Duologic · 2008-12-17 18:16:50

I've noticed that too, my spam filter blocks all the spam, I guess.
Maybe there is a reason that it won't be fixed.

Daenyth · 2008-12-17 21:40:49

Just read the close message...

Xyne · 2008-12-18 00:05:20

*edit*
I had asked if I should open a new bug since the one mentioned had been closed before I had read phrak's reply on the bug tracker.

Last edited by Xyne (2008-12-18 00:08:15)

Allan · 2008-12-18 00:52:06

Can you see email addresses without being logged in?

iBertus · 2008-12-18 00:54:56

Yeah, just google "@gmail.com site:aur.archlinux.org" as an example. You'll get a whole bunch of addresses just from that.

Allan · 2008-12-18 01:29:21

Those are all in PKGBUILDs/ChangeLogs that people have either submitted or posted as a comment. So if you want your email address obfuscated there, you need to do it when submitting packages.

Xyne · 2008-12-18 02:13:42

Allan wrote:

Can you see email addresses without being logged in?

Apparently not, but it's trivial to write a bot to log in and harvest them.

For the record, the email in my PKGBUILDs is obfuscated.

Arch Linux

#1 2008-12-17 16:54:21

Please obfuscate AUR user account email addresses.

#2 2008-12-17 16:56:21

Re: Please obfuscate AUR user account email addresses.

#3 2008-12-17 17:03:30

Re: Please obfuscate AUR user account email addresses.

#4 2008-12-17 17:21:41

Re: Please obfuscate AUR user account email addresses.

#5 2008-12-17 18:16:50

Re: Please obfuscate AUR user account email addresses.

#6 2008-12-17 21:40:49

Re: Please obfuscate AUR user account email addresses.

#7 2008-12-18 00:05:20

Re: Please obfuscate AUR user account email addresses.

#8 2008-12-18 00:52:06

Re: Please obfuscate AUR user account email addresses.

#9 2008-12-18 00:54:56

Re: Please obfuscate AUR user account email addresses.

#10 2008-12-18 01:29:21

Re: Please obfuscate AUR user account email addresses.

#11 2008-12-18 02:13:42

Re: Please obfuscate AUR user account email addresses.

Board footer