You should get a welcome message when a user direct subscribes you to a group that should have an unsubscribe link in it. The welcome message part of the flow that the group manager can set should be added to that message.
There are limits on how many people a group manager can add in this way, it's really not an efficient way to spam a lot of people, but there do seem to be some low level spammers who spend a lot of resources to spam very few people, and our abuse systems play a lot of wack-a-mole with them. I no longer have any access to look at the abuse results for this group or owner. And you can definitely report abuse on particular groups from the web ui, and that is useful to us to learn and improve. I think that welcome message also has a link to the global settings, but it has been years since I've worked on this. You can set the global settings from the web ui: https://support.google.com/groups/answer/9792489?hl=en&ref_topic=2458613 That allows you to prevent group managers from inviting or directly adding your email address to groups. Brandon On Thu, Jun 16, 2022 at 10:52 AM Jaroslaw Rafa via mailop <mailop@mailop.org> wrote: > Dnia 16.06.2022 o godz. 11:38:00 Dan Mahoney via mailop pisze: > > > > Can someone please explain to me how/why a google group manager is able > to > > just add any email address and send to it? Considering all the > > authentication they're requiring, this seems like a gaping hole in any > > kind of security. > > Simply. There's an option in the Google Groups web UI to do that. I do it > routinely on a small group I'm managing. It is a closed group and people > are > added to that group only when they explicitly ask me to be added, and they > cannot add themselves via eg. web interface. So there's no sense in > requiring additional confirmation from them, I just add them directly. > > There's a warning when you use that option which says that you should never > do it without user's consent and that your account may be terminated if you > use that feature for spamming - but these spammers definitely don't care. > > However, I am not sure if Google Groups sends an email to the user who is > being added informing him/her about that if you do not enter any "welcome > message" in the appropriate field when adding users. In my opinion, for > users who are added without being asked for confirmation it definitely > should send such an informational message, and it should be impossible to > turn it off. But I don't know how does it look like in reality. > -- > Regards, > Jaroslaw Rafa > r...@rafa.eu.org > -- > "In a million years, when kids go to school, they're gonna know: once there > was a Hushpuppy, and she lived with her daddy in the Bathtub." > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop >
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
