0

Lately I've gotten some spam emails that link some of my answers/comments on SA. This has led me to wondering if there's some way for SA members to find my email address?

I'm fairly public, so there's other ways they could have done it, but thought I should check.

1 Answer 1

4

User emails are quite protected here.

The normal users cannot see your address at all. Moderators have a way of seeing it, but it is "tucked away" on purpose, and I believe that each instance of looking it up is recorded (even when we view the moderator-only parts of a profile, we have to make an additional click to display the email address). Employees (or maybe only the ones with user-facing roles) also have this kind of access. Both moderators and employees have signed agreements to protect your privacy, and these are taken seriously, so I don't think this would have happened via that route - but I have no idea if some automated malware can exploit our access somehow.

There have been a few vulnerabilities over the years, but nothing recent. For example, originally our avatars were automatically created by the Gravatar service, which turned out to be very cavalier about user data. SE has not used Gravatar for some time, but maybe your account is old enough that your email was exposed. See Received spam, leak of email addresses?.

I also noticed that you have entered a webpage in your profile. That is visible to everyone, and if you have your email on that page, maybe there are bots sophisticated enough to scrape it from there and make the connection.

I will inform the Community managers of the situation, because I think that they should know that this kind of thing is happening, even if the connection was done with information publicly available elsewhere. If you wish, I can ask them to contact you, and see if they can find out something more.

3
  • I have been here long enough to have had a gravatar, so that's one avenue. However ... yeah, it's not hard for someone to scrape my email addresses by tracing my domains. So this was more of a routine check if there was anything exposed in my profile I should delete.
    – FuzzyChef
    May 30, 2022 at 21:13
  • Also, just in case others start reporting the same thing.
    – FuzzyChef
    May 30, 2022 at 21:14
  • Sure. I also think the company should know that somebody is going to the trouble of connecting so many dots for their users. If you want to know what others can see about you, you could look at some other user's profile. Then you'll know if you missed something. Or ask a non-mod to give you a screenshot of your profile, maybe in chat.
    – rumtscho Mod
    May 30, 2022 at 21:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .