On Thu, Apr 21, 2022 at 9:23 AM Glenn Glazer <glenn.glazer@...> wrote:
Yes, I'm aware of this. At the end of last year, Zoom did a security audit (via a 3rd party) of all websites that had Zoom apps, including Groups.io. It came back with a couple of issues in Javascript libraries that we used. I upgraded a few, but one sticking point is that we use a version of Jquery that has some insecure functions. We don't use those functions, so it's not an issue for us. But they won't unsuspend us until I upgrade the library anyways. To upgrade Jquery would require a bunch of work, because other libraries that we use don't work with the latest, secure, version of Jquery. So I would need to find replacements for them, and do the work to integrate them. I thought that the existing Zoom integration would continue to work for people during this, but I guess maybe that's not the case. I have been trying to decide how best to proceed. I'd really like to upgrade the widget library we're using for the website (currently an old version of Bootstrap). If I do that, then the Jquery issue goes away, but it's also a huge amount of work. Thanks, Mark |
|
Ok. I wll test it again later today.
-- J Messages are the sole opinion of the author, especially the fishy ones. |
|
Chris Jones
On Fri, Apr 22, 2022 at 02:40 PM, Duane wrote:
I'm not seeing that.Neither am I. I have just repeated some tests on another group; the results were as follows, and confirm my previous findings both yesterday and 4 years ago. Posts (replies) sent to Group: On the web UI my own Display Name identified me as the originator in both cases with no indication that one message had been sent as a Group Owner. The emails sent to the group used my own Display name in both cases; in one case it was allied to the Group Owner email address; in the other it was allied with my personal address. Posts sent to individual member: The message sent by me as a member showed my (group) Display Name and my own email address as the originator; the message sent by me as Group Owner had no Display Name, just showing the Group Owner email address. In other words, out of the four test messages sent (two of which were readable on both the seb UI and by email) only in the direct message to member sent as Group Owner was it fairly obvious that it had been sent by the Group Owner, and even then only by the absence of a potentially misleading Display Name. Who routinely examines the full detail of the origin of an email to determine the exact "status" of the sender? Well I certainly don't other in those cases where the email looks a bit "iffy". Chris |
|
Moderated
Re: "Bypass: not moderated" status for topics
#suggestion
After posting this I realized that of course, you could not allow topics to be both "moderated" and "bypass - not moderated." And since the former goes through hashtag, and the latter would too, this would require scanning any hashtags users try to attach for conflicts. If these attributes were attachable directly to topcs rather than through hashtags, that would make resolving conflicts easier, and would, I'd argue, make everything simpler and more transparent as well. But I think it would also require a substantial redesign. I think it's worth considering, as radical as it sounds.
-- J Messages are the sole opinion of the author, especially the fishy ones. |
|
Moderated
"Bypass: not moderated" status for topics
#suggestion
Just as there is a hashtag setting that causes a topic to be moderated, I would like a hashtag setting that causes a topic to bypass moderation on the replies of moderated members. (For a moderated group, that would be all members.) This would be useful for some very non-controversial and non-sensitive topics where I don't want to have to be bothered with moderating a lot of replies, or to the contrary, on some time-critical topics (very sick cat) where I want the relevant people to be able to reply immediately and not go through moderation.
-- J Messages are the sole opinion of the author, especially the fishy ones. |
|
On Fri, Apr 22, 2022 at 06:40 AM, Duane wrote:
I'm not seeing that.I know. At least one other person here is also not seeing it. But I've tested this a couple of times. As someone here suggested, maybe it depends on some group setting? -- J Messages are the sole opinion of the author, especially the fishy ones. |
|
On Fri, Apr 22, 2022 at 08:20 AM, Janet_Catlady wrote:
And worse, if you try to send an "anonymous" (i.e., just from owner) "message to member" via Send Message, all they see in the email is your actual address. No owner address at all.I'm not seeing that. It appears that the owner address is the default for Message To Member and I have to click/select my address before it's used. Duane |
|
On Fri, Apr 22, 2022 at 06:11 AM, Marina wrote:
apparently, group members who read posts via web can't see any difference between messages sent personally or as the groups' owner.And worse, if you try to send an "anonymous" (i.e., just from owner) "message to member" via Send Message, all they see in the email is your actual address. No owner address at all. -- J Messages are the sole opinion of the author, especially the fishy ones. |
|
Andy wrote:
I just double-checked, and the message I posted has no trace of the group+owner's address that it should have had, both in the copy that's in the web interface and in the email copy I received. They both show *my* display name and *my* email address, only, as the "From" name/address.I have a similar problem. If I send a message in a group from the +owner's address, the email copy shows my display name (for that specific group) + the owner's address, however the web interface shows just my display name. So, apparently, group members who read posts via web can't see any difference between messages sent personally or as the groups' owner. Marina |
|
Donald Hellen
Mine was from the member list page, checked me as the member, then chose send a
message. I didn't try a post to the group as group-owner but if that's an issue, I'll try that as well as a test. Donald On Thu, 21 Apr 2022 10:56:56 -0700, "Janet_Catlady" <JanetOliviaCatlady@...> wrote: Are you talking about using the Send Message feature from the member page? That's what I'm doing, and it always shows my display name. Not the owner address. ---------------------------------------------------- Some ham radio groups you may be interested in: https://groups.io/g/ICOM https://groups.io/g/Ham-Antennas https://groups.io/g/HamRadioHelp https://groups.io/g/Baofeng https://groups.io/g/CHIRP https://rf-amplifiers.groups.io/g/main |
|
Andy I
The messages I am talking about are messages I posted to a group via New Topic, not to an individual. But as you say, the same problem might apply to both.
I just double-checked, and the message I posted has no trace of the group+owner's address that it should have had, both in the copy that's in the web interface and in the email copy I received. They both show *my* display name and *my* email address, only, as the "From" name/address. I recall seeing this happen before too, a few months ago, but did not bother to follow up. That's interesting that it seems to work sometimes. I wonder if it depends on the group's settings.... Andy |
|
On Thu, Apr 21, 2022 at 10:47 AM, Chris Jones wrote:
a DM to another member sent as the Group Owner does not include the Display Name, just the (group owner) email address.Are you talking about using the Send Message feature from the member page? That's what I'm doing, and it always shows my display name. Not the owner address. -- J Messages are the sole opinion of the author, especially the fishy ones. |
|
Chris Jones
On Thu, Apr 21, 2022 at 06:23 PM, Janet_Catlady wrote:
I'd always assumed that a Message to Member sent as the group owner was virtually anonymous, in the sense that the member could see only that it's coming from the group owner.Well I've just done the same and it worked OK. Interestingly (or not!) a DM to another member sent as the Group Owner does not include the Display Name, just the (group owner) email address. Posts to the Group do include a personal Display Name as mentioned previously. Chris |
|
If you do an activity log search on "edited message," (a) most of the "edited message" activities recorded in the log do not show up, and (b) they first show up in chronological order (earliest first). So I am first seeing edited messages from 2016, and then when I click on the date to reverse the order, I'm missing most of the edit activities. I can't ballpark the fraction I'm missing, or what the criterion is, but it seems to be missing at least half of them. And it misses all the ones I happened to be searching for this morning, namely, edits to many posts by a particular problematic member.
-- J Messages are the sole opinion of the author, especially the fishy ones. |
|
On Thu, Apr 21, 2022 at 10:31 AM, Donald Hellen wrote:
I just now sent a message as group owner to myself and there's no indication onThat's odd. -- J Messages are the sole opinion of the author, especially the fishy ones. |
|
Donald Hellen
I just now sent a message as group owner to myself and there's no indication on
the message I opened that it came from me. It came from the group-owner address, no reference whatsoever which of the owners it was from. Donald On Thu, 21 Apr 2022 10:23:14 -0700, "Janet_Catlady" <JanetOliviaCatlady@...> wrote: I just test-posted a Message to Member to my alternate account and the email shows up not as coming from the group owner but from me. ---------------------------------------------------- Some ham radio groups you may be interested in: https://groups.io/g/ICOM https://groups.io/g/Ham-Antennas https://groups.io/g/HamRadioHelp https://groups.io/g/Baofeng https://groups.io/g/CHIRP https://rf-amplifiers.groups.io/g/main |
|
I just test-posted a Message to Member to my alternate account and the email shows up not as coming from the group owner but from me. Whether it's the address or the display name or both, it's not good. I'd always assumed that a Message to Member sent as the group owner was virtually anonymous, in the sense that the member could see only that it's coming from the group owner. I think this conversation is about posting a message to the group, rather than sending a message to an individual member, but it applies to this case too.
-- J Messages are the sole opinion of the author, especially the fishy ones. |
|
Bruce Bowman
Mark -- Two more questions have recently come up with respect to banning domains:
1. Will banning a domain also head off any such messages that are sent to the group's +owner address? 2. Is it possible to ban a top-level domain? For example, I was able to add *.ru to my list of banned domains, but am unable to verify that it actually works as expected.* Thanks for any clarity you can provide. Regards, Bruce *Ironically, it also allowed me to ban both *.io and groups.io! |
|
Chris Jones
On Thu, Apr 21, 2022 at 05:37 PM, I wrote:
if I get the chance I will try to find the (beta) message concerned.Rather more quickly than I had expected I found it; see here. FWIW "eons" in the previous message turned out to be just over 4 years. Chris |
|
Chris Jones
On Thu, Apr 21, 2022 at 05:23 PM, Andy wrote:
...the message posts with the individual's email address as the sender.Are you sure about that? I ask because I had the need to post as Group Owner earlier this week; I have just double - checked the email I received as a result and it was the Group Owner email address. However, it was associated with my Display Name, which might be the point that you are actually making. I raised this matter eons ago but without any changes taking place; if I get the chance I will try to find the (beta) message concerned. Chris |
|