Re: [Evolution] subscription reminders

On Wed, 2013-05-01 at 11:02 +0100, Pete Biggs wrote:
Gnome mailing lists seem to have started sending out monthly reminders
of all Gnome lists i am subscribed to and what my password is for each
It's standard practise for mailing lists - virtually every mailing list
I'm on does it.


I don't think the emails are even encrypted!!  Doesn't this expose me
to risk?  What would happen if tons of accounts got cracked?  Couldn't
they be used to send tons of spam traffic to Gnome and explore other
The password that is sent out is the one for the mailing list - it
doesn't do anything else within Gnome.  With the password the "hacker"
can change the subscription options for the list, change your password
or change the subscription address.  It doesn't give access to any
personal information (other than your email address, which they've
already got).

AND when you subscribe it says to use a different password from any
non-trivial account you have.

Also, one of the options that that password allows you to change is
whether you get the monthly reminders of your password - if it worries
you, turn it off.
In general mailing list passwords should be considered as disposable and
you definitely shouldn't use the same password as for other more
important things.


Adam Tauno Williams <awilliam whitemice org>

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]