1 Apr
2019
1 Apr
'19
3:12 p.m.
Does anyone else find it useless to have a password reminder email sent out
every month where you're told your password is [****] ?
-------- Forwarded Message --------
Subject: mailman.ampr.org mailing list memberships reminder
Date: Mon, 01 Apr 2019 05:00:19 -0700
From: mailman-owner(a)mailman.ampr.org
To: wlewis(a)acscalifornia.org
This is a reminder, sent out once a month, about your mailman.ampr.org
mailing list memberships. It includes your subscription info and how
to use it to change it or unsubscribe from a list.
<SNIP>
List Password // URL ---- -------- 44net(a)mailman.ampr.org ****
1 Apr
1 Apr
3:23 p.m.
I hope you don't think your mailing list subscription password was ever
secret? When you signed up you were told it wouldn't be.
Saints forbid you used it as a secret password anywhere else!
Would it be better if we called it a "subscription key" instead of
a "password"?
- Brian
On Mon, Apr 01, 2019 at 07:12:44AM -0700, William Lewis via 44Net wrote:
Does anyone else find it useless to have a password
reminder email sent out
every month where you're told your password is [****] ?
2 Apr
2 Apr
5:22 a.m.
On Mon, 1 Apr 2019 07:23:44 -0700, Brian Kantor <Brian(a)bkantor.net>
wrote:
I hope you don't think your mailing list
subscription password was ever
secret? When you signed up you were told it wouldn't be.
Saints forbid you used it as a secret password anywhere else!
Would it be better if we called it a "subscription key" instead of
a "password"?
- Brian
I think the point was that between November and December last year the
password reminder changed from sending the password in clear text to
printing only ****. It's rather pointless to send a "password
reminder" with an obfuscated password. :)
--
Geoff Joy - ke6qh -
AmprNet IP Address Coordinator for San Bernardino & Riverside Counties.
(44.18/16)
5:59 a.m.
It did!?!? I wasn't aware of that; it wasn't a change I purposefully
made. As far as I knew, it was still in plaintext. Thank you for
bringing that to my attention! Looks like that change snuck in piggyback
on some other security update.
You're right, it's pretty useless. I'll turn off monthly password
reminders so as to stop wasting everybody's time. My apologies for
the misunderstanding.
- Brian
On Mon, Apr 01, 2019 at 09:22:59PM -0700, Geoff Joy -KE6QH- wrote:
I think the point was that between November and
December last year the
password reminder changed from sending the password in clear text to
printing only ****. It's rather pointless to send a "password
reminder" with an obfuscated password. :)
--
Geoff Joy - ke6qh -
AmprNet IP Address Coordinator for San Bernardino & Riverside Counties.
(44.18/16)
6:50 p.m.
Brian Kantor said:
It did!?!? I wasn't aware of that; it wasn't a
change I purposefully
made. As far as I knew, it was still in plaintext. Thank you for
bringing that to my attention! Looks like that change snuck in piggyback
on some other security update.
I'll have to check the Mailman instance I maintain for this problem.
You're right, it's pretty useless. I'll
turn off monthly password
reminders so as to stop wasting everybody's time.
I'd like to keep receiving the reminders.
They're a nice reminder of what mailing lists I'm subscribed to. And
serve as a "canary in the coal mine" for low volumne lists.
Thanks && 73,
--
Steve K0STK // k0stk(a)arrl.net
1 Apr
1 Apr
3:34 p.m.
On Mon, 2019-04-01 at 07:12 -0700, William Lewis via 44Net wrote:
Does anyone else find it useless to have a password
reminder email sent out
every month where you're told your password is [****] ?
It is useful for the mailinglist, but not so much useful for you. If the
mailinglist is getting bounces from you, then the final straw is often times
when a monthly reminder bounces.
You can also turn these off in your settings on the mailing list options page.
-Jim P.
10:16 p.m.
Not at all. Like others, I'm grateful that people volunteer their time
to keep the facility operational.
On 2/4/19 1:12 am, William Lewis via 44Net wrote:
Does anyone else find it useless to have a password
reminder email
sent out
every month where you're told your password is [****] ?
-------- Forwarded Message --------
Subject: mailman.ampr.org mailing list memberships reminder
Date: Mon, 01 Apr 2019 05:00:19 -0700
From: mailman-owner(a)mailman.ampr.org
To: wlewis(a)acscalifornia.org
This is a reminder, sent out once a month, about your mailman.ampr.org
mailing list memberships. It includes your subscription info and how
to use it to change it or unsubscribe from a list.
<SNIP>
List Password // URL ---- -------- 44net(a)mailman.ampr.org ****
_________________________________________
44Net mailing list
44Net(a)mailman.ampr.org
https://mailman.ampr.org/mailman/listinfo/44net
2 Apr
2 Apr
4:05 a.m.
William Lewis via 44Net said:
Does anyone else find it useless to have a password
reminder email sent out
every month where you're told your password is=A0=A0=A0=A0=A0 [****] =A0 ?
If you don't want to receive these reminders you may disable them in
your subscription settings.
Use the link which is in every message footer to get started. For your
convenience I've quoted a footer below.
_________________________________________
44Net mailing list
44Net(a)mailman.ampr.org
https://mailman.ampr.org/mailman/listinfo/44net
Instructions for disabling monthly password reminders are at
http://www.gnu.org/software/mailman/mailman-member/node18.html
https://www.google.com/search?q=disable+mailman+monthly+password+reminders
for more help.
--
Steve K0STK // k0stk(a)arrl.net
2073
days inactive
2074
days old
7 comments
6 participants
participants (6)
-
Brian Kantor -
Geoff Joy -KE6QH- -
Jim Popovitch -
Steve K0STK -
vk2tv -
William Lewis