Date   

moderated Re: Messages to +owner being wrongly routed to the whole group

Chris Jones
 

On Thu, Sep 26, 2019 at 08:54 AM, Dave Wade wrote:
When it happened on one of the lists I am on some very personal information about an individual that should not have been sent to the list was disclosed to the whole list....
IMHO this is a very strong lever to try to get the service provider(s) to get their act in order; an address that was acceptably formatted was corrupted with the result that personal information sent in confidence was revealed to a large number of people.

If a service provider is allowed to get away with one corruption then there is no means of obtaining restitution if they suddenly come up with another one.

Chris


moderated Re: Messages to +owner being wrongly routed to the whole group

Peter Martinez <Peter.Martinez@...>
 

On Thu, Sep 26, 2019 at 08:54 AM, Dave Wade wrote:


Folks,

The trouble is when it goes wrong, the effect can be somewhat devastating.
When it happened on one of the lists I am on some very personal information
about an individual that should not have been sent to the list was disclosed
to the whole list....

Dave
Thanks for that Dave! For the benefit of the others reading this, I believe Dave is referring to a group in which both Dave and I (and Chris) are members, and the individual in question was ME!

regards


moderated Re: Messages to +owner being wrongly routed to the whole group

Dave Wade
 

Mark,

GMAIL also ignores “+” and almost all special symbols. (it didn’t used to), but if moderators, one of whom is on BTINTERNET try and use this to chat to each other , then the results are disastrous.

As for the web interface, well many people have a mobile phone as well which uses IMAP/SMPTP so perhaps not as rare as you think

Dave

 

From: main@beta.groups.io <main@beta.groups.io> On Behalf Of Mark Fletcher
Sent: 26 September 2019 01:07
To: main@beta.groups.io
Subject: Re: [beta] Messages to +owner being wrongly routed to the whole group

 

Late replying to this.

 

I'm wary (used it right this time Shal!) of changing this, especially to a period. It's not like periods aren't interpreted differently by different mail servers. Gmail, for example, ignores all periods in email addresses. Next time you send an email to a friend with a gmail account, feel free to sprinkle some periods in the left side of their email address. Note that we do not ignore periods, even for Gmail accounts. If I had to do it over, I'd probably special case this to handle it, but it seems to only confuse people a few times a year.

 

Mark


moderated Re: Messages to +owner being wrongly routed to the whole group

Dave Wade
 

Folks,

The trouble is when it goes wrong, the effect can be somewhat devastating. When it happened on one of the lists I am on some very personal information about an individual that should not have been sent to the list was disclosed to the whole list....

Dave

-----Original Message-----
From: main@beta.groups.io <main@beta.groups.io> On Behalf Of Shal Farley
Sent: 26 September 2019 02:38
To: main@beta.groups.io
Subject: Re: [beta] Messages to +owner being wrongly routed to the whole
group

Mark,


I'm wary (used it right this time Shal!) of changing this, ...
Indeed. ;-)

I too do not favor changing it.

Or even aliasing it. I thought of that but realized it wouldn't solve the problem -
the people who need to use the alias wouldn't know about it. That way lies only
more confusion.

> If I had to do it over, I'd probably special case this to handle it, > but it seems
to only confuse people a few times a year.

I'm not sure what you're thinking, but I thought perhaps you could notice when
receiving a message:

IF (message delivered to Groups.io by btinternet.com) AND
(Received chain includes synchronoss.net) THEN
Do something different.

The question is what to do. I initially thought you could look to the header To
and/or Cc fields to determine if there was a command and what it was, but I
think some of the messages I looked at had neither.
Probably cases of Bcc, but I'm not sure about that.

So the only two actions I can think of would be to either force the message to
Pending, and let the mods deal with it, or reject the message, with a message
text saying that btinternet users must post via the web interface, not via SMTP
client applications.

But either of those are pretty onerous for the 99.9% use case of a simple
message posting. So maybe accept the message for posting if there is a To or
CC that includes the group posting address without command.

Shal


moderated Re: Messages to +owner being wrongly routed to the whole group

 

Chris,

Sorry; I think that is unfair. If + is supposed to be acceptable
character under the terms of RFC 2821 then using it was a perfectly
reasonable decision.
Moreover, it is a decision with precedent. Gmail has been using + for aliases since long before Groups.io was started.

Shal


moderated Re: Messages to +owner being wrongly routed to the whole group

 

Dave,

Um, the idea of btinternet users only posting via the web interface is
surely a non starter.
They can post messages to the group using whichever interface they like. It is only email commands (including messages to +owner) that are afflicted by synchronoss' error.

I have no statistics but I sense on the groups I moderate that
probably 80% of users, including a LOT of btinternet users, only use
email and most have never been anywhere near the web interface.
Whose web interface are you talking about? I'm not talking about using Groups.io's web interface, I'm saying those members need to send email commands using btinternet's webmail interface.

From what I've heard, it is only fossils like myself that cling to SMTP email clients like Thunderbird and Outlook Express - that most email users now use their service's webmail interface instead.

Shal


moderated Re: Messages to +owner being wrongly routed to the whole group

Chris Jones
 

On Thu, Sep 26, 2019 at 08:17 AM, Dave Sergeant wrote:
It all comes down to the decision by Mark to use + as the only
distinguisher of an owners message was a poor one.
Sorry; I think that is unfair. If + is supposed to be acceptable character under the terms of RFC 2821 then using it was a perfectly reasonable decision. The fact that a particular combination of (apparently any) email client, mail provider (BT) and "traffic handler" corrupts addresses with + in them does not negate Mark's original decision.

I have in the non - recent past sent messages to a +owner address without mishap, but clearly I have no idea about what might be responsible for the change in behaviour. I still have some hope that Peter Martinez' enquiry via "BT Community" might bear fruit, although a little of that hope is starting to fade. If other mail service providers allow + addresses to work uncorrupted, then so should BT (etc) under all circumstances.

Having said that I agree that most subscribers are "use by email client" and expecting them to use their mail provider's web UI is probably unrealistic.

Mark; are you in any position whereby you could chase the errant provider(s) from your perspective?

Chris


moderated Re: Messages to +owner being wrongly routed to the whole group

 

Peter,

Groups.io may be the only organisation that has chosen to embed a "+"
within leftsides of addresses within it's own domain, ...
Gmail is another.

It uses + in the user part as the lead-in for an alias address. That feature won't work properly with messages sent from a synchronoss afflicted service.

so we may get no support for any campaign to get it fixed properly.
You can add to your leverage by telling them that they're breaking a Gmail feature.
https://support.google.com/mail/answer/22370?hl=en
(the "Use Gmail aliases" section at the bottom of the page)

Shal


moderated Re: Messages to +owner being wrongly routed to the whole group

Dave Sergeant
 

Um, the idea of btinternet users only posting via the web interface is
surely a non starter. I have no statistics but I sense on the groups I
moderate that probably 80% of users, including a LOT of btinternet
users, only use email and most have never been anywhere near the web
interface.

It all comes down to the decision by Mark to use + as the only
distinguisher of an owners message was a poor one.

Dave

On 25 Sep 2019 at 18:38, Shal Farley wrote:

So the only two actions I can think of would be to either force the
message to Pending, and let the mods deal with it, or reject the
message, with a message text saying that btinternet users must post via
the web interface, not via SMTP client applications.

http://davesergeant.com


moderated Re: Messages to +owner being wrongly routed to the whole group

Peter Martinez <Peter.Martinez@...>
 

Mark/Shal:

The fact that gmail ignores dots in the leftside of email addresses, is not relevant to this discussion. Gmail ONLY do this on emails coming into the gmail domain, and that's reasonable. This practice doesn't affect emails going to any other domain.

We are talking here only about interpreting emails coming into the groups.io domain. The format of the leftside on such emails is entirely at the discretion of groups.io. If groups.io assign special meaning to a leftside with an embedded + or an embedded dot, that doesn't interact in any way with what gmail might do with their incoming emails.

The problem in this case is that we know there are en-route hosts that (illegally) truncate leftsides of emails in transit, treating a "+" as marking the end of the leftside. OK, the proper solution is to get these en-route hosts to cease this practice, but what we are discussing here now is the possibility that groups.io could do something to avoid this bug (because we have a very low expectation of getting it fixed properly). Groups.io may be the only organisation that has chosen to embed a "+" within leftsides of addresses within it's own domain, so we may get no support for any campaign to get it fixed properly.

It shouldn't be difficult to implement. Just amend the code that looks for a "+ so it will accept a dot as marking the start of a commandword. If there ARE presently leftsides assigned within @groups.io that contain embedded dots, then its not as simple, but Mark will know how to deal with that.

As a trial, you could just ADD a process to detect a dot AS WELL AS "+" in the part of the code that parses for email commands. We can then check that groupname(dot)command works and solves the problem and there are no unexpected side-effects. The rest of the users carry on as before. Then it's just a case of amending the documentation and waiting until there are no remaining users who remember the purpose of a "+", then quietly remove the "+" from the code.

Needless to say I AM progressing this problem with binternet. I have had a fault report reference number for a week now but no-one has come back to me yet ...

I don't like the idea of patching the groups.io server to detect "synchronoss" and/or "btinternet" within headers and attempt a kludge. This could cause no end of confusion if btinternet solve the problem at their end, or change to another subcontractor. They have only been using synchronoss for a couple of years. Prior to that they were using Critical Path. This change may have been the onset of this problem of course!

regards
Peter


moderated Re: change verbiage on log entry for forbidden new tag

 

Mark,

Thanks. I would make the following changes. I am including here the phrase "via email," which currently is appended to the log entry (but not included in your message) if the message was sent via email, and is the main source of confusion. I'm assuming the phrase "via web" is appending if the message was posted via web, and in which case, you can substitute "via web" in my suggested changes below. If you can't move that phrase (either "via email" or "via web") to directly after "sent message" (which would be my first choice but perhaps is not practical without major changes), you can clarify parsing by adding and deleting commas, as in the below:

1. change
without any tags, has been asked to update subject via email
to
without any tags and has been asked to add tag(s), via email 

preference would be to put "via email" after "sent message" and then change the rest to
without any tags, has been asked to add tags

2. change
with a tag that only moderators can use, has been asked to update subject via email
to
with a tag that only moderators can use and has been to remove tag, via email

preference would be to put "via email" after "sent message" and then change the rest to
with a tag that only moderators can use, has been asked to remove tag

3. change
with a new tag, has been asked to update subject via email
to
with a disallowed new tag and has been asked to remove tag, via email

preference would be to put "via email" after "sent message" and then change the rest fo
with a disallowed new tag, has been asked to remove tag

--
J

Messages are the sole opinion of the author, especially the fishy ones.
My humanity is bound up in yours, for we can only be human together. - Desmond Tutu


moderated Re: #wishlist Ability to Hide Topics/Posts #suggestion

 

Bryce,

I wrote:
In the More menu under each message is a Report This Message item which can be used to report the message to the group moderators or to Groups.io Support. Maybe that function should have an option (available only to moderators) to also hide the reported message from the view of members.

After Re-reading the prior topic, and some consideration, I retract my suggestion.

Instead I think that Hide Topic (and possibly Hide Message) should be a standalone item in the More menu, equal to the existing Moderate Topic and Lock Topic items. I think that is clearer, and makes it easy to Unhide the topic later, just as one may Unmoderate or Unlock it.

I found a nice fontawesome icon for it: eye-slash:

Shal


moderated Re: Messages to +owner being wrongly routed to the whole group

 

Mark,


I'm wary (used it right this time Shal!) of changing this, ...
Indeed. ;-)

I too do not favor changing it.

Or even aliasing it. I thought of that but realized it wouldn't solve the problem - the people who need to use the alias wouldn't know about it. That way lies only more confusion.

If I had to do it over, I'd probably special case this to handle it,
but it seems to only confuse people a few times a year.
I'm not sure what you're thinking, but I thought perhaps you could notice when receiving a message:

IF (message delivered to Groups.io by btinternet.com) AND
(Received chain includes synchronoss.net)
THEN
Do something different.

The question is what to do. I initially thought you could look to the header To and/or Cc fields to determine if there was a command and what it was, but I think some of the messages I looked at had neither. Probably cases of Bcc, but I'm not sure about that.

So the only two actions I can think of would be to either force the message to Pending, and let the mods deal with it, or reject the message, with a message text saying that btinternet users must post via the web interface, not via SMTP client applications.

But either of those are pretty onerous for the 99.9% use case of a simple message posting. So maybe accept the message for posting if there is a To or CC that includes the group posting address without command.

Shal


moderated Re: notification on update

Glenn Glazer
 

Many thanks,  Mark!

Best, 

Glenn 

On Wed, Sep 25, 2019, 16:57 Mark Fletcher <markf@corp.groups.io> wrote:
On Mon, Sep 23, 2019 at 3:28 PM Glenn Glazer <glenn.glazer@...> wrote:
When we upload a file, there is a checkbox for notifying the list. There is not one on the update window.  Would it be possible to add this checkbox and accompanying notification so that I can let members know when I've updated our files?

I have added this.

Cheers,
Mark 


moderated Re: Messages to +owner being wrongly routed to the whole group

 

Late replying to this.

I'm wary (used it right this time Shal!) of changing this, especially to a period. It's not like periods aren't interpreted differently by different mail servers. Gmail, for example, ignores all periods in email addresses. Next time you send an email to a friend with a gmail account, feel free to sprinkle some periods in the left side of their email address. Note that we do not ignore periods, even for Gmail accounts. If I had to do it over, I'd probably special case this to handle it, but it seems to only confuse people a few times a year.

Mark


moderated Re: change verbiage on log entry for forbidden new tag

 

On Wed, Sep 25, 2019 at 8:14 AM J_Catlady <j.olivia.catlady@...> wrote:
I just found the following log entry in the group activity log and had no idea what it meant:

"[xyz member] sent message "[message subject]" with a new tag, has been asked to update subject via email"

There are 3 associated activity log messages:

"LogLine": "{{(ActivityUserDisplay .Activity true $.Group)}} sent message \"{{.Activity.Subject}}\" without any tags, has been asked to update subject"
"LogLine": "{{(ActivityUserDisplay .Activity true $.Group)}} sent message \"{{.Activity.Subject}}\" with a tag that only moderators can use, has been asked to update subject"
"LogLine": "{{(ActivityUserDisplay .Activity true $.Group)}} sent message \"{{.Activity.Subject}}\" with a new tag, has been asked to update subject"

When someone gets one of these messages, it contains a link to edit the message, much like a pending message (the same code is used, in fact). This is so they don't have to send the message again.

Happy to change the wording to make all these more clear.

Mark
 


moderated Re: notification on update

 

On Mon, Sep 23, 2019 at 3:28 PM Glenn Glazer <glenn.glazer@...> wrote:
When we upload a file, there is a checkbox for notifying the list. There is not one on the update window.  Would it be possible to add this checkbox and accompanying notification so that I can let members know when I've updated our files?

I have added this.

Cheers,
Mark 


moderated Re: #wishlist Ability to Hide Topics/Posts #suggestion

 

Bryce,


... I would like a feature to able to Hide Topics/Messages.

I think this is a good suggestion, as I don't think the feature exists (yet).
In the More menu under each message is a Report This Message item which can be used to report the message to the group moderators or to Groups.io Support. Maybe that function should have an option (available only to moderators) to also hide the reported message from the view of members.

See also Hide Topic Function for an earlier request of this feature.

Shal


moderated Re: delete old messages

KWKloeber
 

<<<>It's impractical to be able to remove all traces of someone who has participated in a discussion group." >>>

Removing posts (‘er, messages) is not equal to hunting down and removing ALL traces of a member.

Why are y’all arguing practicality?  That’s up to Mark and seems the type discussion he asked NOT become a never-ending on beta. Speak how to improve a suggestion, not why Mark can’t do something. 

Da dum, stepping off the soapbox. 


moderated #wishlist Ability to Hide Topics/Posts #suggestion

Bryce Weathersby
 

Howdy,.,. I am fairly new to Groups.io so this may have been discussed or hashed already, but I would like a feature to able to Hide Topics/Messages. An example is we have a former member of our group who posted some things that may wind up in legal battles, so we would like to hold the messages, but not make them visible on the site anymore, so deleting them is not the option we want to follow. Any help would be appreciated.

6241 - 6260 of 28388