963186 - spam sent to my bugzilla.mozilla account address

Status: RESOLVED WORKSFORME

(bugzilla.mozilla.org :: General, defect)

Description

[u252996]

Attachment: firespam.txt

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:26.0) Gecko/20100101 Firefox/26.0 (Beta/Release)
Build ID: 20131205075310

Steps to reproduce:

nothing


Actual results:

I'm afraid my former bugzilla mail adress ([e-mail]) has been compromised here.
The address is unique, it's not listed in any address book and I never used it with any communication - just for creating my account here and filing a bug several years ago. In fact I did not receive any other spam before the 21st of January 2014. (see attached mail)

Comment 1

[David Lawrence [:dkl]]

I do not see [e-mail] as an account in our system. Are you asking for this account ([e-mail]) to be disabled so as to not receive any more email?

dkl

Comment 2

[u252996]

As I said, [e-mail] has been my _former_ address. The address, I was using when I initially started my account here long time ago. And of course you don't see it anymore since I changed it to [e-mail] and deleted the old address right after the spam started.

Comment 3

[:glob ✱]

bugzilla is a public place, and currently email addresses are included in that public information.
from https://bugzilla.mozilla.org/createaccount.cgi

> Bugzilla is a public place, so what you type and your email address
> will be visible to all logged-in users. Some people use an alternative
> email address for this reason.

unfortunately this is a limitation of bugzilla itself (a single field is used for both your username and email address).

sorry about the spam you've received as a result of this :(

work is currently under-way in bug 218917 to separate your login from your email address, which will allow your address to be kept private.