Re: [emergency-msg] Groups - modified

[Kon Wilms <kon@datacast.biz>]

On Tue, 2005-03-29 at 15:49 +0000, rexb@starbourne.com wrote:
> Access:     

Uh oh.

For the benefit of member-services who I've cc'd:

Your calendar system sends out an email whenever users schedule a
meeting. Your mailing lists are indexed by google. Any script kiddie
using google can search for a combination of 877 and passcode and hit
our conference information. By its nature, your current mailing
announcement system automatically compromises every new calendar
announcement. People are then free to listen in on conferences, abuse
them (as has already happened), or use them when the lines are dead air.

Please either:

a. change your listserver settings and prevent googlebot and other bots
from indexing it (preferred, but you must do more than a simple
robots.txt file)
b. modify your calendar system to not send out telephone access
information (or mask out the number & code when the email is generated).

Cheers
Kon