I just filed a remote DoS bug against a Telepathy component, and ticked the “Telepathy security team” group to avoid making it public. But the default assignee and QA contact for Telepathy bugs is the telepathy-bugs mailing list, so my report is now published for all the world to see. What's done is done, but it would be nice if ticking that box changed the assignee and QA contact to someone in the “Telepathy security team” group so that this doesn't happen again.
*** Bug 63401 has been marked as a duplicate of this bug. ***
This sucks and is super counter-intuitive. But on the other hand, we don't have the time/energy to add features and new UI to Bugzilla, and it will hopefully be deprecated in favour of GitLab anyway. So, with regret, going to WONTFIX this one, five years on. Sorry.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.