launchpad-dev team mailing list archive

[Launchpad Bug Tracker <376734@xxxxxxxxxxxxxxxxxx>]

You have been subscribed to a private bug by Robert Collins (lifeless):

So, u1 found an interesting point: you can get anyones mail address via
the lp web api. This is rather different to having to gather data from
web pages.

I'm worried spammers may do:
 1) sign up
 2) use api to suck down brazillions of email addresses

Even though sign up isn't automated, the volume of emails available via
the api is substantial

Perhaps we need to limit this somehow - e.g. to require a common team
member ship or something?

** Affects: launchpad
     Importance: Undecided
         Status: New

-- 
api allows mail address harvesting
https://bugs.edge.launchpad.net/bugs/376734
You received this bug notification because you are a member of Launchpad Community Development Team, which is a direct subscriber.