Scott,

Unless I am mistaken, you are not registered with QOS.CH Jira. The email below was sent to all Jira users where username=email_address.

The default assigned user for logback issues is user named "logback-dev@qos.ch" which happens to be the email address of this list.

Anyway, you can safely ignore my previous email below.

--
Ceki

On 1/18/2017 1:04, Scott Babcock wrote:
Thanks for looking out for me! Where is my user name set to my email
address?



------------------------------------------------------------------------
*From:* logback-dev <logback-dev-boun...@qos.ch> on behalf of Ceki Gulcu
<c...@qos.ch>
*Sent:* Thursday, January 12, 2017 4:35 PM
*To:* logback-dev@qos.ch
*Subject:* [logback-dev] QOS.CH Jira username is your email address


Dear Logback dev list             ,

On the QOS.CH Jira instance issues can be browsed by anonymous users,
that is without logging in. The Jira web-page for a given issue will
contain the user name of the reporter as well as the user names for
all those who commented on the issue.

Thus, web-crawlers will be able to see user names on our Jira
instance. This is acceptable as long as user names do not contain
sensitive data.

However, given that your user name matches your email address on the
QOS.CH Jira instance, we fear that your email address may leak to
anonymous web-crawlers (who can see your Jira user name).

Please note that many other publicly accessible Jira installations
suffer from the exact same problem.

Modifying your user name so as to make it different than your email
address should stop the aforementioned data leakage. Unfortunately,
you cannot change your user name on your own. Only the Jira
administrator can change it.

In light of the above, if you decide to change your Jira user name,
please let me know the user name of your choice by replying to this
message.

Best regards,

--
Ceki Gülcü


_______________________________________________
logback-dev mailing list
logback-dev@qos.ch
http://mailman.qos.ch/mailman/listinfo/logback-dev

_______________________________________________
logback-dev mailing list
logback-dev@qos.ch
http://mailman.qos.ch/mailman/listinfo/logback-dev

Reply via email to