2011/7/1 Mike Shaver <mike.shaver at gmail.com>: > What can someone do with that password, though? Just change your > subscription settings, afaik, so the security in place seems proportionate. > > Could report it upstream to the mailman team, I suppose. Use it to do a better job of impersonating. Try it out on other sites.