From owner-cvs-src@FreeBSD.ORG Sat Mar 25 05:39:58 2006 Return-Path: X-Original-To: cvs-src@FreeBSD.org Delivered-To: cvs-src@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4D74516A401; Sat, 25 Mar 2006 05:39:58 +0000 (UTC) (envelope-from dom@helenmarks.co.uk) Received: from mail.goodforbusiness.co.uk (mail.goodforbusiness.co.uk [83.223.104.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id 36B1A43D46; Sat, 25 Mar 2006 05:39:57 +0000 (GMT) (envelope-from dom@helenmarks.co.uk) Received: from localhost (localhost [127.0.0.1]) by mail.goodforbusiness.co.uk (Postfix) with ESMTP id 9F1C411464; Sat, 25 Mar 2006 05:39:56 +0000 (GMT) Received: from mail.goodforbusiness.co.uk ([127.0.0.1]) by localhost (mail.goodforbusiness.co.uk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 82893-03; Sat, 25 Mar 2006 05:39:54 +0000 (GMT) Received: from mail.helenmarks.co.uk (unknown [87.194.32.124]) by mail.goodforbusiness.co.uk (Postfix) with ESMTP id 6E9CD1141E; Sat, 25 Mar 2006 05:39:54 +0000 (GMT) Received: from localhost (localhost [127.0.0.1]) by mail.helenmarks.co.uk (Postfix) with ESMTP id 1AB9C1705A; Sat, 25 Mar 2006 05:39:54 +0000 (GMT) Received: from mail.helenmarks.co.uk ([127.0.0.1]) by localhost (mail.helenmarks.co.uk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 97371-09; Sat, 25 Mar 2006 05:39:49 +0000 (GMT) Received: from [192.168.15.3] (egg.helenmarks.co.uk [192.168.15.3]) by mail.helenmarks.co.uk (Postfix) with ESMTP id 751A317059; Sat, 25 Mar 2006 05:39:49 +0000 (GMT) Message-ID: <4424D825.6040003@helenmarks.co.uk> Date: Sat, 25 Mar 2006 05:41:57 +0000 From: Dominic Marks User-Agent: Thunderbird 1.5 (X11/20060207) MIME-Version: 1.0 To: Kris Kennaway References: <200603241638.k2OGc2qt094713@repoman.freebsd.org> <20060324084458.A88774@xorpc.icir.org> <44243867.4090501@sippysoft.com> <20060324183303.GA26205@xor.obsecurity.org> <44248297.5020201@FreeBSD.org> <20060325015521.GA31895@xor.obsecurity.org> In-Reply-To: <20060325015521.GA31895@xor.obsecurity.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: By ClamAV 0.85.1 X-Virus-Scanned: By GoodforBusiness.co.uk Cc: Maxim Sobolev , src-committers@FreeBSD.org, John Baldwin , cvs-src@FreeBSD.org, cvs-all@FreeBSD.org, Luigi Rizzo Subject: Re: email mangling (Re: cvs commit: src/bin/ls cmp.c extern.h ls.1 ls.c ls.h print.c util.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Mar 2006 05:39:58 -0000 Kris Kennaway wrote: > On Fri, Mar 24, 2006 at 03:36:55PM -0800, Maxim Sobolev wrote: >> Kris Kennaway wrote: >>> On Fri, Mar 24, 2006 at 10:20:23AM -0800, Maxim Sobolev wrote: >>>> Luigi Rizzo wrote: >>>>> On Fri, Mar 24, 2006 at 04:38:02PM +0000, John Baldwin wrote: >>>>> ... >>>>>> Submitted by: Andrzej Tobola ato at iem dot pw dot edu dot pl >>>>> i understand that this is an attempt to prevent email harvesting, >>>>> but don't you think that such programs will be smart enough >>>>> to recognize sequences of 'foo at bar dot baz' and convert >>>>> back to regular email addresses ? :) >>>> Perhaps we have to change policy to put only contributor's name, not >>>> email, into the commit message. >>> No thanks, it makes it impossible to contact them later on when all >>> other context is lost. >> Hmm, you can dig it out of PR, no? > > Not if it wasn't submitted via a PR, no. > > Kris Demo: http://goodforbusiness.co.uk/~dom/mail/ http://goodforbusiness.co.uk/~dom/mail/?c=105678 (my email) Summary: Public web page which maps a unique numeric id to an email address. The number can be used to redeem an unmangled email address easily from a public web page. This is hard for spammers to trawl because the id is a non sequential number and when you view the address it is in the form of a png image. You then anyone can quote the number for the E-Mail address in the PR / commit / corrospondance / etc. All it requires is a quick lookup to get the real email address. Anyone can add addresses to the system as long as they pass a simple human test. In my demo you solve a simple calculation before you can add an address. This way those people who dont want their email addresses displayed like this can generate their own number and put that in their PRs (ie: less work for committers) It is more effective than text obfuscation. Obviously a proper implementation of this would need to be put on a freebsd.org box or other trusted system. Just a suggestion. Dom (105678)