launchpad-dev team mailing list archive

[Stuart Bishop <stuart.bishop@xxxxxxxxxxxxx>]

Harvesters already have the tools to extract email addresses via web
scraping. I don't see any additional danger here. Launchpad just isn't a
big enough target to bother writing custom scripts for when the generic
ones work just fine already.

-- 
api allows mail address harvesting
https://bugs.launchpad.net/bugs/376734
You received this bug notification because you are a member of Launchpad
Community Development Team, which is a direct subscriber.

Status in Launchpad itself: New

Bug description:
So, u1 found an interesting point: you can get anyones mail address via the lp web api. This is rather different to having to gather data from web pages.

I'm worried spammers may do:
 1) sign up
 2) use api to suck down brazillions of email addresses

Even though sign up isn't automated, the volume of emails available via the api is substantial

Perhaps we need to limit this somehow - e.g. to require a common team member ship or something?