On 11/2/00 1:55 PM, "Dave Kovac" <[EMAIL PROTECTED]> wrote:
> My wife was addressing a message this morning and noticed that A LOT of
> names appeared as possible auto-completes (for lack of a better term) from
> people who are not in her address book. These are names and email addresses
> of people she doesn't know.
>
> Being involved in a few higher ed listserv's, we figure that names of
> subscribers are being pulled from those mailing lists (because of the high
> number of .edu suffixes). This DOES NOT OCCUR (as far as I can tell) with
> posters to this list. For example, I try to get Entourage to auto-complete
> "Paul Berkowitz" and it does not (though I probably should have Paul in my
> address book :)).
>
> So am I right in guessing this is a server side problem? Are there some
> mailing list server setups that compromise subscriber information?
>
> Thanks for any help you can give in helping plug what I consider to be a
> major security hole.
>
No, its a bug with the auto-complete thing that we've discussed a lot on the
beta list. E is _supposed_ to keep track of the last 200 people who
correspond with you (including mailing lists, as you say), and then bump
people off to be replaced by others with a greater "weighting". This is some
complex algorithm that relates to both length of time since someone wrote to
you (or vice versa) plus how many times over time period. But it's flawed:
people "never" seem to get bumped off once they're on, so newer, more
frequent correspondents never seem to get a look in. They'll need to fix
this algorithm.
--
Paul Berkowitz
--
To unsubscribe: <mailto:[EMAIL PROTECTED]>
To search the archives:
<http://www.mail-archive.com/entourage-talk%40lists.boingo.com/>
