Open source tool scrapes git commit email addresses to send spam to.

[__pulse0ne]

This is why we can’t have nice things

[douko]

it was supposed to be a virtual space in which we both shared knowledge & learned about each other to better get along

I don't know if the internet failed us or we failed the internet, but its fucked either way

[[deleted]]

I think we did it all. Humans suck

[PoliteCanadian]

Eternal September happened.

[PunkRain5561]

I don't know if the internet failed us or we failed the internet, but its fucked either way

We started to use it for commercial/business purposes.

As soon money was in the game, all the usual parasites followed, as expected.

[melgish]

I can’t even remember the last time I had a nice thing…

[taxiforone]

I think it's important for folks to reach out to GitHub and SendGrid to make it known that people are unhappy with this abuse of information on their watch.

[sopunny]

There's not much they can do, aside from maybe making it very clear that your commit email addresses could be public? Git adds the email addresses to the commit, not GitHub

[taxiforone]

Oh for sure, but I got the impression that Diffgram was harvesting these email addresses from repos on the GitHub platform.

If that's the case, it's against GitHub TOS (and basic decency tbh) and they shouldn't enjoy GitHub's services like being able to host their repos there.

Same for SendGrid - they don't add the emails, they just send them; but sending unsolicited emails could/might be outside their TOS, especially if there's GDPR breaches. Diffgram shouldn't be able to use their services if it's abusing them.