Re: [mailop] Anyone from GitHub here?

2019-03-06 Thread Steve Atkins


> On Mar 6, 2019, at 6:21 PM, Aaron C. de Bruyn via mailop  
> wrote:
> 
> 
> On Wed, Mar 6, 2019, 00:01 Philip Paeps  wrote:
> I wonder if GitHub cares about their platform being used for harvesting.
> 
> I wonder if the Yellow Pages cares about their phone book being used by prank 
> callers.  /sarcasm
> 
> https://github.com/ppaeps
> 
> Make your email address private.  Otherwise it's exposed to the internet 
> at-large.

Even if you make it private it is used for git actions done on github, and 
those email addresses - along with any others you've used in your git repo - 
are in your git repos, and probably public.

(And yes, there are companies who harvest from there).

This doesn't really seem particularly related to mail operations, though.

Cheers,
  Steve


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Anyone from GitHub here?

2019-03-06 Thread Aaron C. de Bruyn via mailop
On Wed, Mar 6, 2019, 00:01 Philip Paeps  wrote:

> I wonder if GitHub cares about their platform being used for harvesting.
>

I wonder if the Yellow Pages cares about their phone book being used by
prank callers.  /sarcasm

https://github.com/ppaeps

Make your email address private.  Otherwise it's exposed to the internet
at-large.

How did GitHub know that me visiting your profile was legit verses
harvesting your email for spam?

-A
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Anyone from GitHub here?

2019-03-06 Thread Raymond Burkholder

On 2019-03-06 12:54 a.m., Philip Paeps wrote:
I share my mailserver with several GitHub users.  Recently, we've all 
been getting recruitment spam to addresses mined from GitHub.
Here is a blog article talking about how GitHub is mined, and what they 
do (or don't do about it).


https://www.troyhunt.com/8-million-github-profiles-were-leaked-from-geekedins-mongodb-heres-how-to-see-yours/



I wonder if GitHub cares about their platform being used for harvesting.

Email to ab...@github.com appears to be ignored.



Raymond Burkholder
https://blog.raymond.burkholder.net/

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Anyone from GitHub here?

2019-03-06 Thread Philip Paeps

On 2019-03-06 16:40:43 (+0800), Renaud Allard via mailop wrote:

On 3/6/19 8:54 AM, Philip Paeps wrote:
I share my mailserver with several GitHub users.  Recently, we've 
all been getting recruitment spam to addresses mined from GitHub.


I wonder if GitHub cares about their platform being used for 
harvesting.


Email to ab...@github.com appears to be ignored.

Anyone from GitHub on this list?


Are you sure this doesn't come from geekedin compromise?
https://www.troyhunt.com/8-million-github-profiles-were-leaked-from-geekedins-mongodb-heres-how-to-see-yours/


Today's spam run was from a recruitment firm offering money for code 
reviews and seemed targetted based on automated scraping of GitHub 
profiles.


I haven't checked if the addresses are in the geekedin compromise.

Could be related.

Thanks for the pointer.

Philip

--
Philip Paeps
Senior Reality Engineer
Ministry of Information

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Anyone from GitHub here?

2019-03-06 Thread Renaud Allard via mailop

Hi,

Are you sure this doesn't come from geekedin compromise?
https://www.troyhunt.com/8-million-github-profiles-were-leaked-from-geekedins-mongodb-heres-how-to-see-yours/

Regards

On 3/6/19 8:54 AM, Philip Paeps wrote:
I share my mailserver with several GitHub users.  Recently, we've all 
been getting recruitment spam to addresses mined from GitHub.


I wonder if GitHub cares about their platform being used for harvesting.

Email to ab...@github.com appears to be ignored.

Anyone from GitHub on this list?

Philip





smime.p7s
Description: S/MIME Cryptographic Signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Anyone from GitHub here?

2019-03-06 Thread Benjamin BILLON
Hi Philip, they absolutely do, let me forward your email to them.

Cheers, 
--
Benjamin

-Original Message-
From: mailop  On Behalf Of Philip Paeps
Sent: mercredi 6 mars 2019 08:54
To: mailop 
Subject: [mailop] Anyone from GitHub here?

I share my mailserver with several GitHub users.  Recently, we've all been 
getting recruitment spam to addresses mined from GitHub.

I wonder if GitHub cares about their platform being used for harvesting.

Email to ab...@github.com appears to be ignored.

Anyone from GitHub on this list?

Philip

--
Philip Paeps
Senior Reality Engineer
Ministry of Information

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop