Mailing list reminder: password is sent in the clear

Mike Samuel mikesamuel at
Fri Jul 1 11:30:57 PDT 2011

2011/7/1 Mike Shaver <mike.shaver at>:
> What can someone do with that password, though? Just change your
> subscription settings, afaik, so the security in place seems proportionate.
> Could report it upstream to the mailman team, I suppose.

Use it to do a better job of impersonating.  Try it out on other sites.

More information about the es-discuss mailing list