[Pansophy] FW: Your Incident INC0083639 has comments added - I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Ku

[Valerie Bookwalter]

FYI

From: IT Service Desk <jlab at servicenowservices.com>
Sent: Wednesday, July 6, 2022 6:10 PM
To: Valerie Bookwalter <bookwalt at jlab.org>
Subject: Your Incident INC0083639 has comments added - I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Ku


Subject: I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Ku

Incident: INC0083639

Comments:

________________________________
07-06-2022 06:09:38 PM EDT - Roger DuBois Additional comments
Hi Valerie,

The Pansophy email list is available to the public, along with the email archives. Google has crawled this public site, and made all emails in the archive available. It is likely that 'any' user on this list will return email results when searched on Google.

If this is *not* what you expect, let me know.
Thanks,
Roger DuBois
________________________________
07-06-2022 01:49:07 PM EDT - Valerie Bookwalter Additional comments
I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Kurt Macha) who is retired about finding emails with his name on google search . Inserted below:

Hi PT,
I received texts from Kurt Macha that I've pasted below. I thanked him for letting me know, and said I'd pass along the message.

Is it possible that there is a security issue within Pansophy?
Regards,
Ed

---------

Ed, I noticed when searching my name on Google that some email chains at JLab are public. Someone might want to close such threads regarding private JLab information. Looks like this is widespread for others in SRF. I think this leak is related to Pansophy.

https://www.google.com/search?q=mailman.jlab.org+kurt+macha&biw=414&bih=707&sxsrf=ALiCzsZ6HetTn0N2XApL24KqDbU6Q6xW2g%3A1656450946423&ei=gm-7Yr6yGcPn5NoPopuvkA4&oq=mailman.jlab.org+kurt+macha&gs_lcp=ChNtb2JpbGUtZ3dzLXdpei1zZXJwEAMyBQghEKABMgUIIRCgATIFCCEQoAEyBQghEKABOgQIIxAnOgUIIRCrAkoECEEYAVD9CljdO2C-P2gAcAB4AIABjwOIAfcSkgEIMTAuNC4yLjKYAQCgAQHAAQE&sclient=mobile-gws-wiz-serp

Get Outlook for Android


I am looking into the Pansophy system for recent emails sent to macha at jlab.org<mailto:macha at jlab.org>. But broader than that, why is email accessible on google search?

You can view all the details of the incident by following the link below:
Take me to the Incident<https://urldefense.proofpoint.com/v2/url?u=https-3A__jlab.servicenowservices.com_nav-5Fto.do-3Furi-3Dincident.do-3Fsys-5Fid-3D58cfad911ba45150a888ea4ce54bcb51&d=DwMFaQ&c=CJqEzB1piLOyyvZjb8YUQw&r=aYqUCPYT_88Bj0dWUVdMaJfxMdMxnE6zbzxulqpTgEw&m=gSYMITkLMO7g29l5rm6VHFbWrV-iHdgq_9ybMVa82Nv7_mIoqUEgFyO-DTzHSlNR&s=XB3-zaWMjIgAd2_vIjEmTxQEvCGaiJkZUPpb6htRIAs&e=>

Original Request:

I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Kurt Macha) who is retired about finding emails with his name on google search . Inserted below:

Hi PT,
I received texts from Kurt Macha that I've pasted below. I thanked him for letting me know, and said I'd pass along the message.

Is it possible that there is a security issue within Pansophy?
Regards,
Ed

---------

Ed, I noticed when searching my name on Google that some email chains at JLab are public. Someone might want to close such threads regarding private JLab information. Looks like this is widespread for others in SRF. I think this leak is related to Pansophy.

https://www.google.com/search?q=mailman.jlab.org+kurt+macha&biw=414&bih=707&sxsrf=ALiCzsZ6HetTn0N2XApL24KqDbU6Q6xW2g%3A1656450946423&ei=gm-7Yr6yGcPn5NoPopuvkA4&oq=mailman.jlab.org+kurt+macha&gs_lcp=ChNtb2JpbGUtZ3dzLXdpei1zZXJwEAMyBQghEKABMgUIIRCgATIFCCEQoAEyBQghEKABOgQIIxAnOgUIIRCrAkoECEEYAVD9CljdO2C-P2gAcAB4AIABjwOIAfcSkgEIMTAuNC4yLjKYAQCgAQHAAQE&sclient=mobile-gws-wiz-serp

Get Outlook for Android


I am looking into the Pansophy system for recent emails sent to macha at jlab.org<mailto:macha at jlab.org>. But broader than that, why is email accessible on google search?


Ref:MSG0583179_dLgFUEsga55u3O6zwdmC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.jlab.org/pipermail/pansophy/attachments/20220708/4ee85528/attachment.html>