[fdo] Spam from gitlab.freedesktop.org

[LE GARREC Vincent]

Oh... Nice catch :) I have some old commits in poppler. I didn't remember I
used this mail to sign. Thanks for your help :) and sorry for bothering you.

Vincent

Le mer. 13 juil. 2022 à 02:07, darkdragon <darkdragon-001 at web.de> a écrit :

> Did you add any commits to any repos (including Gitlab Wiki)?
>
> When cloning the repo (or using the API?), one can read out author and
> committer e-mail addresses publicly.
>
> On Wed, Jul 13, 2022, 01:28 LE GARREC Vincent <legarrec.vincent at gmail.com>
> wrote:
>
>> Thanks for the answer.
>>
>> By spam, I mean : "New profiles of this week's girls" from "aqwawhx@@at@@antony-hoste..dot...free...dot...hr"
>> (mail obfuscation ;) )
>>
>> As I said, I have a different mail for each online service so I don't
>> care about the spam.
>>
>> But I think it's important to warn you about a possible breach. If no
>> other people complains, the breach came from me ^.^
>>
>> Le mar. 12 juil. 2022 à 21:28, Lyude Paul <lyude at redhat.com> a écrit :
>>
>>> Hi! Actually I think you've got the right place :). By "spam" do you
>>> just mean Gitlab's slightly over-bearing email notifications?
>>>
>>> And regarding email addresses being public info: no, gitlab does store
>>> email addresses but the only people who can see them are the user in
>>> question and gitlab instance admins (so Daniel Stone, Benjamin Tissoires,
>>> and some folks from the bard like myself). I hope that answers your
>>> question, feel free to respond if you have more!
>>>
>>> On Fri, 2022-07-08 at 17:15 +0200, LE GARREC Vincent wrote:
>>>
>>> Dear,
>>>
>>> Today, it's the second time I received spam from my freedesktop gitlab
>>> mailbox. The first time was about 2 months ago (sorry, I didn't keep the
>>> mail).
>>>
>>> I use a different mailbox for each inscription on the web. My unique
>>> mail is something like freedesktop-gitlab-with-arobase-at-my-name.fr.
>>>
>>> Is it possible that my mail from the gitlab inscription may be
>>> accessible from the Internet?
>>>
>>> If not, then I just want to worry about it. I'm not really sure if it's
>>> the right place to post.
>>>
>>> Best regards,
>>>
>>> Vincent
>>>
>>>
>>> --
>>>
>>> Cheers,
>>> Lyude Paul (she/her)
>>> Software Engineer at Red Hat
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/freedesktop/attachments/20220713/6e634a71/attachment-0001.htm>