On Sun, Mar 6, 2022 at 05:23 PM, Andy wrote:

Clicking on the link always opens a new web browser tab and brings my browser to the target folder that has the files in it.

But today, someone else tried it and it does not work for him.

Is he logged in?

Bruce

On Sun, Mar 6, 2022 at 04:24 PM, Andy wrote:

I never figured out what happened in February [2020]

A little oopsy, https://beta.groups.io/g/main/message/24423

Duane

Another group member, with Firefox Version 97.0.2, says that it works for him.  I don't know the other member's version number or platform or OS.

Back in February 7, 2020, something significant apparently happened in groups.io that altered the listings of many Files.  I don't know what groups were affected, but all the ones I checked were, so I assumed it was all groups.

Whatever happened caused the "Upload" date to be rewritten with the new date (7th of Feb. 2020).  Since then, we now have two dates ("Created" and "Updated") for Files, and fortunately the "Created" date was unchanged, so we have the original dates back.  Whatever happened, some files were affected, but not all.  I think all text files had their dates rewritten, and some others, but not most binary files.

As far as I know, the files themselves were unchanged.  Just the date stamps.

I never figured out what happened in February, aside from the Coronavirus.  I tried searching a few times but did not find anything.  Anyone know what happened?

Thanks,
Andy

I am getting a complaint from a group member about a link I added in Files.  He says it doesn't work.  I am trying to find out why.

Backstory:  In my group, there is a small collection of files in a Folder, some going back to 2005.  I wanted to add a link to that Folder in another place, where members can find it more easily.

So, I added a Link in the other location.  I went to the folder where I wanted to add the link, and clicked "+New/Upload", then "Generic Link".  Then I pasted the URL of the target Folder into the "URL" box, gave the link a Name, and a Description.  I tried it, and it works perfectly -- for me.  Clicking on the link always opens a new web browser tab and brings my browser to the target folder that has the files in it.

But today, someone else tried it and it does not work for him.  He says that it just opens up a new browser window in the same location where he started (the one that has the link in it).  It never goes to the target folder.

His web browser is Firefox.  Mine is Chrome.  Is that why?

In case it matters -- the target Folder name has spaces in it.  It's been like that for ages, since at least 2005.  Of course the URL has "%20" everywhere there would be a space.  Chrome handles that.  Apparently Firefox does not?  Or something in the code from groups.io doesn't handle it when interfacing with Firefox?

Thanks,
Andy

Hi Mark,

I just manually followed a topic which had attachments on some of the messages.  When I got the catch-up emails, while the attachments were included and correctly named, the files themselves were not the actual files but some pointer/reference/object name/no clue gibberish characters value (can be viewed in Windows Notepad).  The "attachments" range in size from 24 bytes for PDFs to around 200 bytes for the JPEGs and other types.  They seem to contain the same starting string to a certain point, then it varies. A second test of this on the same group with a different topic with attachments behaved the same way.

I can attach samples if needed from those gibberish attachments sent out, from both topics, renamed to .TXT to ensure they don't cause any extension-related issues to anyone.  Or email off-list.

The attachments save correctly if someone is viewing the topic online and does a RightClick-SaveAs on one of the message's linked attachments.

Cheers,
Christos

It's a good idea to have an email command to get a response listing the groups you are subscribed to.

Rather than having to mis-address an email to (or 'make up') a non-extent Group,
how about sending a message to <mygroups@groups.io> to get a response listing the groups you are subscribed to.

Unfortunately, an unused test group (1 member, 0 topics) already exists with that name
https://groups.io/g/Mygroups
however I'd be surprised if they could not be obliged to change that group name...

OR
<myowngroups@groups.io> could be the address to get a response listing the groups you are subscribed to.

On Sat, Mar 5, 2022 at 09:52 AM, Janet_Catlady wrote:

Duane's point was that that can't happen, because the email address you used would be the one attached to the account the groups are in. So unless somebody hacked your email, there's no obvious security risk.

Sorry, I misunderstood. I thought that user A could get a list of user B's subscribed groups using this method.

On Sat, Mar 5, 2022 at 06:41 AM, Mark Murphy wrote:

Suppose you don't want just anyone on the internet to know what groups you subscribe to

Duane's point was that that can't happen, because the email address you used would be the one attached to the account the groups are in. So unless somebody hacked your email, there's no obvious security risk.

The feature is (or was), however, not aesthetic and could be made prettier.
 
--
J

Messages are the sole opinion of the author, especially the fishy ones.
My humanity is bound up in yours, for we can only be human together. - Desmond Tutu

On Fri, Mar 4, 2022 at 11:10 AM, Duane wrote:

I'm not sure how this could be a security risk since the bounce would only go to the address it was sent from.  It sure was handy for helping members with problems.

Suppose you don't want just anyone on the internet to know what groups you subscribe to? I don't. Please let's try to keep the few remaining shreds of privacy we have.

Thanks,

Mar

Changes to the site this week:

March 4, 2022:

• BUGFIX: Fixed mobile/app formatting issue with Your Calendar. Discussion
• BUGFIX: The Upload Folder function in the Files section was ignoring directories and was just adding all the included files at the top level. Discussion

March 2, 2022:

• NEW: Made group aliases smarter, so that they respect any URL path and redirect to the correct web page, instead of the previous behavior of always redirecting to the group home page.

March 1, 2022:

• CHANGE: On the /membersubgroups/ page, if all of the group are configured to Force HTML Emails, then do not display the Plain Digest Action option.
• CHANGE: On the /membersubgroups/ page, if all of the group are configured to Disable No Email, then do not display the No Email Action option.

February 28, 2022:

• BUGFIX: If a message with a hashtag that has been aliased to another hashtag is sent to a group set to remove new hashtags, an erroneous error message was returned stating that a new hashtag had been used.
• BUGFIX: If a message with a new hashtag was sent to a group set to remove new hashtags, any existing hashtags would appear duplicated in the /topics display.
• NEW: If a message with a new hashtag is sent to a group configured to remove new hashtags, the Sent message activity log message now appends with a new tag which was removed to the entry.
• CHANGE: Changed activity log message Message without any tags from sent message (SUBJECT) without any tags to attempted to send message (SUBJECT) without any tags.
• CHANGE: Changed activity log message Message with a tag only moderators can use from sent message (SUBJECT) with a tag that only moderators can use to attempted to send message (SUBJECT) with a tag that only moderators can use.
• CHANGE: Changed activity log message Message with a new tag from sent message (SUBJECT) with new tag to attempted to send message (SUBJECT) with new tag.

The next #changelog will be published on Friday, March 11.

Take care everyone.

Mark

On Fri, Mar 4, 2022 at 06:13 PM, Mark Fletcher wrote:

The `Upload Folder` function should be fixed now.

It's interesting that when uploading a folder, I get an activity log entry for every file and subfolder uploaded but when I delete a folder, I just get a single entry about the deleted folder and nothing about the files and subfolders contained within it.

Regards
Andy

>>>
I now see that this was changed on February 22, 2021 per https://beta.groups.io/g/main/message/28578.  I'm not sure how this could be a security risk since the bounce would only go to the address it was sent from.  It sure was handy for helping members with problems.
<<<

Just an idea, it would require some (hopefully small) amount of work from Mark. 

Replicate more-or-less the group-level groupname+command@groups.io functionality for the main account level.

If someone emails a blank message to their GIO-munged email address with the +grouplist suffix, and their FROM and (if specified) REPLY-TO addresses match the un-munged (account) address, email back the group list, as plain text with no group links, except maybe any generic sitewide links.

E.g., my account addy is xyz@... , GIO-munged is xyz@... .  I send a blank message From: xyz@... [and if I use it ReplyTo: xyz@... as well) to xyz@... and then receive the reply back at xyz@....

That would allow the info to go out for troubleshooting or for account info and still should be pretty-secure, except of course in the case when someone hijacks an email account or the computer itself but in that case all bets are off anyway, plus I'm sure they would be more interested in stealing and hacking $$$ accounts than finding out what groups the person belongs to.

Plus the functionality/framework could be useful down the road for adding additional email-based account-level settings/setup/reporting (paid or not) capabilities.

Cheers,
Christos

...
RA| Much better and obvious to have
| an option on the site where the
| person who is logged in can see
| to which groups he/she belong to.

Du| That already exists at (...).
| This was good for those that don't go
| online and only interact via email.


I'm that person. I don't go online
and I interact via email for messages
(for reading and for writing).

But when necessary, then I go to
the each group's website.

But, ok... It's was just a tought.


[ ] Rubens





.

I would call this a bug, although that designation may be controversial: Suppose you're set to "following only" and "first message also." If you click on "Follow This Topic" for a topic you weren't following before, you are then sent all the messages from that topic - the system essentially catches you up. But if you follow the topic by means of replying to it, you miss all the  intervening messages.

That just happened to me in Duane's topic about the list of groups. I received his OP and replied to it without having seen all the intervening messages, because I was not yet following it. But after I replied to it, I didn't receive the intervening messages as a catch-up, as I would have if I had clicked "Follow This Topic" instead of replying to it.
--
J

Messages are the sole opinion of the author, especially the fishy ones.
My humanity is bound up in yours, for we can only be human together. - Desmond Tutu

I wonder where is the discussion that says "this is a security breech".

I can think of reasons why it is not a security breech.  But I can't think of a reason why it is.

Andy

I never knew about that but it sounds like a great (if unintentional) feature!

--
J

Messages are the sole opinion of the author, especially the fishy ones.
My humanity is bound up in yours, for we can only be human together. - Desmond Tutu

On Fri, Mar 4, 2022 at 10:26 AM, Rubens wrote:

Much better and obvious to have
an option on the site where the
person who is logged in can see
to which groups he/she belong to.

That already exists at https://groups.io/groups.  This was good for those that don't go online and only interact via email.

Duane

...
Du| To get a list of all groups that
| an email address is subscribed to,
| I could send an email from that
| address to a non-existent group.
| The bounce message would include
| a list of the subscribed groups.


A bit obscure this method, isn't?...

Much better and obvious to have
an option on the site where the
person who is logged in can see
to which groups he/she belong to.


[ ] Rubens






.