Timeline for Is my email address accessible?
Current License: CC BY-SA 3.0
13 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 9, 2016 at 17:41 | comment | added | Martin Tournoij | "Each time we access your personal information it's logged so that we (as in SE and other moderators) can see who accessed what and when" -> Logging is one thing, but is someone actually looking at the logs? Or are there safeguards in place? For example, what would happen if I would access try to yank the email and IP address from every user on the site where I'm a mod? Would alarm-bells ring at SE HQ? | |
May 9, 2015 at 16:23 | comment | added | Shog9 | By default, it's email (or IP) + salt, @undone. You can opt-in to the raw hashed version if you have a Gravatar account, but that's not done automatically anymore. | |
May 8, 2015 at 15:44 | comment | added | undone | @user11153 No, it's only based on your email (MD5 of your email). | |
May 8, 2015 at 9:19 | comment | added | user11153 | @JonasCz I think that identicons are generated from "email + some-secret-hardcoded-salt" | |
May 8, 2015 at 9:12 | comment | added | Albzi | You can change your profile picture though. Plus, I've changed mine and I still occasionally run into people with the same one (it's not unique or anything, but it still happens). | |
May 8, 2015 at 7:10 | comment | added | ruakh | @JonasCz: Usernames are not unique; it would be pretty poor design if two users who selected the same username would therefore both automatically receive the same identicon . . . | |
May 7, 2015 at 21:10 | comment | added | Flexo - Save the data dump Mod | @Yakk moderators can see those audit events. Nobody viewed it before May 6th on both SO and MSO. (I can't comment on any of the other sites with accounts). | |
May 7, 2015 at 10:13 | comment | added | Jonas Czech | @Yakk, I believe that email hashes were removed from the data dump a while back, but someone could possibly take your autogenerated identicon and get the hash from it (?). IMO, Those identicons should not be generated based on your email, but from your username instead. | |
May 6, 2015 at 21:22 | comment | added | Yakk - Adam Nevraumont | Hmm. See comment above linking to another thing. MD5-to-email can take the auto-generated avatars and extract email addresses? | |
May 6, 2015 at 21:13 | comment | added | Yakk - Adam Nevraumont |
Is it worth the time to see which, if any, <> moderators have accessed freefaller's email information prior to 5 hours ago? Accounts on 10 sites, if all it takes is one diamond moderator to harvest email addresses...
|
|
May 6, 2015 at 15:56 | vote | accept | freefaller | ||
May 6, 2015 at 15:54 | comment | added | freefaller | Thanks for the confirmation Chris. Looks like I was suckered in with the mention of stackoverflow. I realise now that it was pretty unlikely stackexchange would be the culprit here! The recruiter appears to have become uncharacteristically quiet now I've pointed out he can't have got my email address from here. Sigh | |
May 6, 2015 at 15:49 | history | answered | ChrisFMod | CC BY-SA 3.0 |