Unsolicited email incident on Groups.drupal.org

Events happening in the community are now at Drupal community events on www.drupal.org.
tvn's picture

Hi all,

2 days ago there was an unsolicited email incident on Groups.drupal.org. A number of people were added to a group without their permission and subsequently received email notifications for posts and comments in that group. This was done via 'Add members' functionality, which was available to all group organizers on Groups.drupal.org. The problem was reported via the Groups issue queue and other channels and site maintainers took immediate steps to delete the group in question and disable comments on posts to stop email notifications going out to all affected users.

Our next step was to disable 'Add members' functionality to prevent such situations in the future. Group organizers still have 'Invite friend' functionality available to invite people to their groups, which will require users to accept invitation, giving their explicit permission to be added to the group.

We apologize for the inconvenience this caused.

Groups.drupal.org team

Comments

Good decision

Seomagic84's picture

You made a superb decision. Now only people who wanted to be here can be here.

Is it possible to ban

dgtlmoon's picture

Is it possible to ban 'recruitment' agencies from spamming Groups too? perhaps a no-recruitment-agency policy?

Job posts might go away from

tvn's picture

Job posts might go away from groups.drupal.org altogether sometime in the future. Here is related issue https://www.drupal.org/node/2292881.

I can no longer add maintainers to g.d.o/core following this

xjm's picture

https://www.drupal.org/project/groupsdrupalorg

There is no "invite friend" link for g.d.o/core. It is (and should remain) invite only.

"No way to add members to

yesct's picture

"No way to add members to 'Invite only' or 'Closed' groups" Issue https://www.drupal.org/node/2374737

Cathy Theys

Maintenance

Group organizers

Group categories

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: