Am I the only one who just received this email from this group? Which came with my password in the email in plain text?
Begin forwarded message:
From: centos-request@centos.org Date: June 15, 2018 at 12:31:04 PM EDT To: rjcdevelop@gmail.com Subject: confirm a8e9e592b9d81e13e569ffa9f6f4267c3f2a8fe8
Your membership in the mailing list CentOS has been disabled due to excessive bounces The last bounce received from you was dated 15-Jun-2018. You will not get any more messages from this list until you re-enable your membership. You will receive 3 more reminders like this before your membership in the list is deleted.
To re-enable your membership, you can simply respond to this message (leaving the Subject: line intact), or visit the confirmation page at
https://lists.centos.org/mailman/confirm/centos/a8e9e592b9d81e13e569ffa9f6f4...
You can also visit your membership page at
https://lists.centos.org/mailman/options/centos/rjcdevelop%40gmail.com
On your membership page, you can change various delivery options such as your email address and whether you get digests or not. As a reminder, your membership password is
Removed For Security
If you have any questions or problems, you can contact the list owner at
centos-owner@centos.org
I got it as well.
On Fri, Jun 15, 2018 at 12:41 PM rj coleman rjcdevelop@gmail.com wrote:
Am I the only one who just received this email from this group? Which came with my password in the email in plain text?
Begin forwarded message:
From: centos-request@centos.org Date: June 15, 2018 at 12:31:04 PM EDT To: rjcdevelop@gmail.com Subject: confirm a8e9e592b9d81e13e569ffa9f6f4267c3f2a8fe8
Your membership in the mailing list CentOS has been disabled due to excessive bounces The last bounce received from you was dated 15-Jun-2018. You will not get any more messages from this list until you re-enable your membership. You will receive 3 more reminders like this before your membership in the list is deleted.
To re-enable your membership, you can simply respond to this message (leaving the Subject: line intact), or visit the confirmation page at
https://lists.centos.org/mailman/confirm/centos/a8e9e592b9d81e13e569ffa9f6f4...
You can also visit your membership page at
https://lists.centos.org/mailman/options/centos/rjcdevelop%40gmail.com
On your membership page, you can change various delivery options such as your email address and whether you get digests or not. As a reminder, your membership password is
Removed For Security
If you have any questions or problems, you can contact the list owner at
centos-owner@centos.org
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Mee too
Il Ven 15 Giu 2018, 18:45 Larry Martell larry.martell@gmail.com ha scritto:
I got it as well.
On Fri, Jun 15, 2018 at 12:41 PM rj coleman rjcdevelop@gmail.com wrote:
Am I the only one who just received this email from this group? Which came with my password in the email in plain text?
Begin forwarded message:
From: centos-request@centos.org Date: June 15, 2018 at 12:31:04 PM EDT To: rjcdevelop@gmail.com Subject: confirm a8e9e592b9d81e13e569ffa9f6f4267c3f2a8fe8
Your membership in the mailing list CentOS has been disabled due to excessive bounces The last bounce received from you was dated 15-Jun-2018. You will not get any more messages from this list until you re-enable your membership. You will receive 3 more reminders like this before your membership in the list is deleted.
To re-enable your membership, you can simply respond to this message (leaving the Subject: line intact), or visit the confirmation page at
https://lists.centos.org/mailman/confirm/centos/a8e9e592b9d81e13e569ffa9f6f4...
You can also visit your membership page at
https://lists.centos.org/mailman/options/centos/rjcdevelop%40gmail.com
On your membership page, you can change various delivery options such as your email address and whether you get digests or not. As a reminder, your membership password is
Removed For Security
If you have any questions or problems, you can contact the list owner at
centos-owner@centos.org
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
On Fri, Jun 15, 2018 at 9:57 AM, Gianluca Cecchi gianluca.cecchi@gmail.com wrote:
Il Ven 15 Giu 2018, 18:45 Larry Martell larry.martell@gmail.com ha scritto:
On Fri, Jun 15, 2018 at 12:41 PM rj coleman rjcdevelop@gmail.com wrote:
Am I the only one who just received this email from this group? Which came with my password in the email in plain text?
Your membership in the mailing list CentOS has been disabled due to excessive bounces The last bounce received from you was dated 15-Jun-2018. You will not get any more messages from this list until you re-enable your membership. You will receive 3 more reminders like this before your membership in the list is deleted.
I got it as well.
Mee too
I also received the "has been disabled" notification. It looks like users with gmail addresses are affected.
CentOS admins are looking into this issue (I believe).
Akemi
Sounds like either centos-owner was cleaning up the subscription list or GMail was down for a while and bouncing everyone's mail.
On 2018-06-15, rj coleman rjcdevelop@gmail.com wrote:
Am I the only one who just received this email from this group? Which came with my password in the email in plain text?
This is a standard feature of GNU Mailman. You can disable the monthly password reminder in your user preferences (which is the same place you can change your password, if you are concerned that it was sniffed during the SMTP exchange).
The Mailman signup page warns you that the password will be emailed:
"You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext."
--keith
Ah I see. That said, this email wasn't a password reminder. It was a "your membership has been disabled" email.
On Fri, Jun 15, 2018 at 2:36 PM, Keith Keller < kkeller@wombat.san-francisco.ca.us> wrote:
On 2018-06-15, rj coleman rjcdevelop@gmail.com wrote:
Am I the only one who just received this email from this group? Which
came with my password in the email in plain text?
This is a standard feature of GNU Mailman. You can disable the monthly password reminder in your user preferences (which is the same place you can change your password, if you are concerned that it was sniffed during the SMTP exchange).
The Mailman signup page warns you that the password will be emailed:
"You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext."
--keith
-- kkeller@wombat.san-francisco.ca.us
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
WRT mailing the password in clear text .. how else would it mail it?
Mailman does not store any kind of encryption keys for email, and frankly, most people don't know how to use encrypted email. This list probably has a (much) higher percentage of people who would know how to use encrypted mail (ie, Linux users .. who are more computer literate than the average person). But, I don't think mailman has sending administrative mails to users encrypted as an option.
WRT this issue .. several hundred gmail accounts (and few other accounts) were disabled at a specific time today. We don't yet know exactly why this happened and before we mass reenable the accounts, we need to make sure it is not going to happen again.
Since so many of the mails are gmail.com accounts, this has to be something that gmail did today at 1530 GMT (when all the accounts were disabled) and the mails were sent).
We will try to figure out exactly what happened and get everything back to normal as soon as we can.
Thanks, Johnny Hughes
On 06/15/2018 02:32 PM, rebecca coleman wrote:
Ah I see. That said, this email wasn't a password reminder. It was a "your membership has been disabled" email.
On Fri, Jun 15, 2018 at 2:36 PM, Keith Keller < kkeller@wombat.san-francisco.ca.us> wrote:
On 2018-06-15, rj coleman rjcdevelop@gmail.com wrote:
Am I the only one who just received this email from this group? Which
came with my password in the email in plain text?
This is a standard feature of GNU Mailman. You can disable the monthly password reminder in your user preferences (which is the same place you can change your password, if you are concerned that it was sniffed during the SMTP exchange).
The Mailman signup page warns you that the password will be emailed:
"You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext."
--keith
On Fri, 15 Jun 2018 17:44:47 -0500 Johnny Hughes johnny@centos.org wrote:
WRT mailing the password in clear text .. how else would it mail it?
Mailman does not store any kind of encryption keys for email, and frankly, most people don't know how to use encrypted email. This list probably has a (much) higher percentage of people who would know how to use encrypted mail (ie, Linux users .. who are more computer literate than the average person). But, I don't think mailman has sending administrative mails to users encrypted as an option.
WRT this issue .. several hundred gmail accounts (and few other accounts) were disabled at a specific time today. We don't yet know exactly why this happened and before we mass reenable the accounts, we need to make sure it is not going to happen again.
Since so many of the mails are gmail.com accounts, this has to be something that gmail did today at 1530 GMT (when all the accounts were disabled) and the mails were sent).
We will try to figure out exactly what happened and get everything back to normal as soon as we can.
see here: https://investorplace.com/2016/09/gmail-down-outage-googl-goog-stock/
d
Thanks, Johnny Hughes
On 06/15/2018 02:32 PM, rebecca coleman wrote:
On 2018-06-15, Dave Stevens geek@uniserve.com wrote:
see here: https://investorplace.com/2016/09/gmail-down-outage-googl-goog-stock/
Wasn't this almost two years ago?
--keith
On Jun 15, 2018, at 6:44 PM, Johnny Hughes johnny@centos.org wrote:
WRT mailing the password in clear text .. how else would it mail it?
For this communication, not at all. The password was totally unnecessary. If I’d requested to have it sent, however, I now understand this system will email plain text passwords rather than a reset link etc. All good.
And good luck sorting out what happened today!
-
Akemi Yagi -
Darr247 -
Dave Stevens -
Gianluca Cecchi -
Johnny Hughes -
Keith Keller -
Larry Martell -
rebecca coleman -
rj coleman