Nmap Development mailing list archives

Re: Removing email addresses from NSE script author field


From: "DePriest, Jason R." <jrdepriest () gmail com>
Date: Thu, 19 Nov 2009 22:13:52 -0600

I never thought about them being used to fuel SPAM.

Keeping the names and removing the email addresses should be okay
since anyone who is actively maintaining a script will likely be
reading the nmap-dev list.

Perhaps put information about subscribing to or contacting nmap-dev
instead of individual email addresses?

-Jason

On Thu, Nov 19, 2009 at 10:08 PM, Fyodor <> wrote:
Hi folks.  I've noticed NSE author fields in several formats,
including:

p2p-conficker.nse: author = "Ron Bowes (with research from Symantec Security Response)"

http-enum.nse: author = "Ron Bowes <ron () skullsecurity net>, Andrew Orr
                        <andrew () andreworr ca>, Rob Nicholls
                        <robert () everythingeverything co uk>"

smb-enum-sessions.nse: author = "Ron Bowes"

Hehe, I just noticed that Ron is in all of my examples.  That fellow
is prolific :).

I'd say that at least half the scripts contain email addresses which
are then posted without any anti-spam obfuscation on pages like
http://nmap.org/nsedoc/scripts/http-enum.html.  Email addresses also
tend to go out of date.

So I'm thinking of removing the email addresses from the scripts
(keeping the associated names, of course).

If you care one way or the other on this, let me know.  If people
don't want their email addresses removed, I can look into implementing
the same sort of anti-spam obfuscation used for the seclists.org
mailing list archives.

Cheers,
-F

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


Current thread: