[NTLK] [ADMIN] Monthly Mailing List Membership Reminders

[lordgroundhog at gmail.com]

Like Sylvain I must admit I didn't realize all this about the password. I never even noticed it was included in the monthly e-mail.  I'd better find mine pretty quick, eh? 

As for GDPR:  I don't suppose we'd be the first target, but I think I like the novel idea of a law intended to protect privacy and security instead of yet another law designed to erode it.  




Shalom, 

Christian 

~~~ ~~~ ~~~

"I had to go back and transcribe all of my speech notes from my Newton, which is what I usually use for giving speeches from, because I wasn't sure I was going to be able to read it in this light, so I had to transcribe the notes onto paper. Unfortunately, my Newton is better at reading my handwriting than I am. So, there may be a pause while I try and decipher what I've written."

            -- Douglas Adams

http://youtube.com/watch?v=1ZzpdPJ7Zr4
(With thanks to Chod Lang)
http://tinyurl.com/29y2dl
http://www.diyplanner.com/node/3942

~~~ ~~~ ~~~
Get MUGged and love it: http://www.oxmug.org/
Where Newtonians meet: http://www.newtontalk.net/


-----Original Message-----
From: Sylvain Pilet <sylvain at pilet.net>
To: Newton Liste Newton Talk US <newtontalk at newtontalk.net>
Sent: Tue, 04 Jun 2019 23:46
Subject: Re: [NTLK] [ADMIN] Monthly Mailing List Membership Reminders

Grant, 

Like everyone else, I say, safety is a priority.

But I'd like to understand, you're saying that the Mailman Listing sends our list password in plain text, right?
But what password are you talking about? We do not need a password to register on the list. I think I'm missing something. 


Sylvain Pilet

http://message-pad.net
http://messagepad.no-ip.org:3680 [NPDS Tracker]

> Le 4 juin 2019 à 18:22, Grant Hutchinson <grant at splorp.com> a écrit :
> 
> Hello everyone.
> 
> A list member brought to my attention that the monthly membership reminder emails that you receive contain your list password in plain text. While I’ve known about this “feature” of the Mailman mailing list software for years, I’ve never paid much attention to the potential security risks it presents.
> 
> I have a couple of options to address this issue:
> 
> 1) Determine whether the reminder email template can be modified to remove the password information
> 
> ... or ...
> 
> 2) Disable the monthly reminders altogether
> 
> The simplest solution is to disable the reminders, but I wanted to check with you folks first.
> 
> Do any of you find value in these reminder emails?
> 
> 
> g.
> 
> ----------------------------------------------------------------------
> 
> Grant Hutchinson
> NewtonTalk List Dad & Interweb Custodian
----------------------------------------------------------------------

http://newtontalk.net/
http://twitter.com/newtontalk