Does anyone else find it useless to have a password reminder email sent out every month where you're told your password is [****] ?
-------- Forwarded Message -------- Subject: mailman.ampr.org mailing list memberships reminder Date: Mon, 01 Apr 2019 05:00:19 -0700 From: mailman-owner@mailman.ampr.org To: wlewis@acscalifornia.org
This is a reminder, sent out once a month, about your mailman.ampr.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list.
<SNIP>
List Password // URL ---- -------- 44net@mailman.ampr.org ****
I hope you don't think your mailing list subscription password was ever secret? When you signed up you were told it wouldn't be.
Saints forbid you used it as a secret password anywhere else!
Would it be better if we called it a "subscription key" instead of a "password"? - Brian
On Mon, Apr 01, 2019 at 07:12:44AM -0700, William Lewis via 44Net wrote:
Does anyone else find it useless to have a password reminder email sent out every month where you're told your password is [****] ?
On Mon, 1 Apr 2019 07:23:44 -0700, Brian Kantor Brian@bkantor.net wrote:
I hope you don't think your mailing list subscription password was ever secret? When you signed up you were told it wouldn't be.
Saints forbid you used it as a secret password anywhere else!
Would it be better if we called it a "subscription key" instead of a "password"?
- Brian
I think the point was that between November and December last year the password reminder changed from sending the password in clear text to printing only ****. It's rather pointless to send a "password reminder" with an obfuscated password. :)
It did!?!? I wasn't aware of that; it wasn't a change I purposefully made. As far as I knew, it was still in plaintext. Thank you for bringing that to my attention! Looks like that change snuck in piggyback on some other security update.
You're right, it's pretty useless. I'll turn off monthly password reminders so as to stop wasting everybody's time. My apologies for the misunderstanding. - Brian
On Mon, Apr 01, 2019 at 09:22:59PM -0700, Geoff Joy -KE6QH- wrote:
I think the point was that between November and December last year the password reminder changed from sending the password in clear text to printing only ****. It's rather pointless to send a "password reminder" with an obfuscated password. :) -- Geoff Joy - ke6qh - AmprNet IP Address Coordinator for San Bernardino & Riverside Counties. (44.18/16)
Brian Kantor said:
It did!?!? I wasn't aware of that; it wasn't a change I purposefully made. As far as I knew, it was still in plaintext. Thank you for bringing that to my attention! Looks like that change snuck in piggyback on some other security update.
I'll have to check the Mailman instance I maintain for this problem.
You're right, it's pretty useless. I'll turn off monthly password reminders so as to stop wasting everybody's time.
I'd like to keep receiving the reminders.
They're a nice reminder of what mailing lists I'm subscribed to. And serve as a "canary in the coal mine" for low volumne lists.
Thanks && 73,
On Mon, 2019-04-01 at 07:12 -0700, William Lewis via 44Net wrote:
Does anyone else find it useless to have a password reminder email sent out every month where you're told your password is [****] ?
It is useful for the mailinglist, but not so much useful for you. If the mailinglist is getting bounces from you, then the final straw is often times when a monthly reminder bounces.
You can also turn these off in your settings on the mailing list options page.
-Jim P.
Not at all. Like others, I'm grateful that people volunteer their time to keep the facility operational.
On 2/4/19 1:12 am, William Lewis via 44Net wrote:
Does anyone else find it useless to have a password reminder email sent out every month where you're told your password is [****] ?
-------- Forwarded Message -------- Subject: mailman.ampr.org mailing list memberships reminder Date: Mon, 01 Apr 2019 05:00:19 -0700 From: mailman-owner@mailman.ampr.org To: wlewis@acscalifornia.org
This is a reminder, sent out once a month, about your mailman.ampr.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list.
<SNIP>
List Password // URL ---- -------- 44net@mailman.ampr.org ****
44Net mailing list 44Net@mailman.ampr.org https://mailman.ampr.org/mailman/listinfo/44net
William Lewis via 44Net said:
Does anyone else find it useless to have a password reminder email sent out every month where you're told your password is=A0=A0=A0=A0=A0 [****] =A0 ?
If you don't want to receive these reminders you may disable them in your subscription settings.
Use the link which is in every message footer to get started. For your convenience I've quoted a footer below.
44Net mailing list 44Net@mailman.ampr.org https://mailman.ampr.org/mailman/listinfo/44net
Instructions for disabling monthly password reminders are at http://www.gnu.org/software/mailman/mailman-member/node18.html
https://www.google.com/search?q=disable+mailman+monthly+password+reminders for more help.
-
Brian Kantor -
Geoff Joy -KE6QH- -
Jim Popovitch -
Steve K0STK -
vk2tv -
William Lewis