Mailing list reminder: password is sent in the clear

Mike Samuel mikesamuel at gmail.com
Fri Jul 1 11:30:57 PDT 2011


2011/7/1 Mike Shaver <mike.shaver at gmail.com>:
> What can someone do with that password, though? Just change your
> subscription settings, afaik, so the security in place seems proportionate.
>
> Could report it upstream to the mailman team, I suppose.

Use it to do a better job of impersonating.  Try it out on other sites.


More information about the es-discuss mailing list