[Nottingham] Plain text passwords?

Martin martin at ml1.co.uk
Sun Nov 1 21:10:02 UTC 2015


Rory,

Good to see you on the list. What part of the world are you in now?


On 01/11/15 09:23, Rory Holland wrote:
> I just got my monthly membership reminder email from mailman, which I
> usually ignore.
> 
> What caught my eye today though is my password, sent to me in plain text
> at the bottom of the email.

Yes... That's an old one from long ago that caught my attention when I
first joined. That was back in the day before the present spam onslaught
and untrustworthy ISPs + others selling 'their' "user content"...


There is the clear text on where you join on

http://mailman.lug.org.uk/mailman/listinfo/nottingham

that says:

"You may enter a privacy password below. This provides *only mild*
security, but should prevent others from messing with your subscription.
*Do not use a valuable password* as it will occasionally be emailed back
to you in cleartext."

(My emphasis.)



Follow-on email for a fix...

Regards,
Martin


-- 
- ╔═══════════════════╦══════════════════════════════════════════╗
- ║   Martin Lomas    ║ OpenPGP (GPG/PGP) Public Key: 0xCEE1D3B7 ║
- ║ martin@ ml1 co uk ║ Import from   hkp://subkeys.pgp.net   or ║
- ║ ----------------- ║ http:// ml1 .co .uk/martin_ml1_co_uk.gpg ║
- ╚═══════════════════╩══════════════════════════════════════════╝



More information about the Nottingham mailing list