Automatic download list serves as spamlist

[Lydia Pintscher]

On Wed, May 27, 2009 at 01:00, Albert Astals Cid <aacid at kde.org> wrote:
> A Dilluns, 25 de maig de 2009, Krzysztof Chrapka va escriure:
>> To KDE.org team,
>> unfortunatly after posting some contents on kde-looks.org, I got my very
>> first Nigerian spam letter. After quick googling out where did my e-mail
>> address croped up in the Internet, I found it on the
>> http://download.kde.org/khotnewstuff/amarokscripts/amarokscripts.xml
>> automatic download list. As far as I remember, I have not allowed
>> redistributing my email address and I was assured that it will not be
>> visible to the other users. Moreover, I am unable to change it in a
>> spam-bot secure method (with replacing @ or dot characters), since you are
>> checking validity of address after each change. Although the email address
>> was given on page associated to  opendesktop.org, it leaked out to the open
>> Internet from the KDE project domain.
>>
>> Hoping, this thoughtless security hole will be patched soon,
>> Yours sincerely,
>> Krzysztof Chrapka
>
> Frank? Lydia?
>
> Albert

I am an editor on the open-desktop sites but I don't really know much
about the technical side of it or KHotNewStuff. Frank or Jeremy will
have to answer that one.


Cheers
Lydia


-- 
Lydia Pintscher
Amarok community manager
kde.org - amarok.kde.org - kubuntu.org
claimid.com/nightrose