It wasn¡¯t ¡°my choice¡± to have my email address blasted out to other group moderators - that¡¯s a groups.IO design decision and a ¡°feature¡± I was unaware of.?
The moderators of any group I¡¯m not a member of should not be able to even know I exist.?
A username and unlimited time and access is how hacking is enabled.?
Now I know I have to have any of our moderators understand how groups.IO handles their email address should they need to modify the email address of any of our members and/or create an email address with limited use and consider using MFA.
I¡¯ll let the moderator of the group that contacted me know all of this is by design.
On Wed, May 3, 2023 at 04:21 AM, George Park wrote:
Leaking PII/a moderators login info to people/groups they are unaffiliated with is not a great design.
I don't consider an email address to be PII, though some do.? If it actually has your name in it, then it's by your choice.? As far as the login aspect, it's useless unless they also have your password.