Full Disclosure mailing list archives
Re: mailman email harvester
From: Bernhard Kuemel <bernhard () bksys at>
Date: Wed, 09 Feb 2005 15:18:14 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dana Hudes wrote: | The report is good. Attaching the results in their entirety gives | spammers who don't have your technical capability, not to mention | script kiddies looking for victims for their viruses, a huge leg | up. Irresponsible doesn't begin to describe it. So let's shut down full-disclosure. | More appropriate would be specimens and a description of | methodology. I informed the mailman developers about the problem more than a year ago and the number of vulnerable lists only increased: http://www.mail-archive.com/mailman-developers () python org/msg06853.html If they don't spread the word someone else has to do it. I'm not worried about the 60,000 email addresses. They asked for being this example by being public. Let's hope this will make list admins secure the addresses which are only available to subscribers (which are a lot more). Bye, Bernhard -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFCChum9zL78+QhnUgRAoO8AJ9E3ph/U0Czys+Zx2Dorzx/AamfYACfaELr G+d9ospmfb902OzDZM4ci24= =wzz9 -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- mailman email harvester Bernhard Kuemel (Feb 07)
- Re: mailman email harvester Dave Korn (Feb 08)
- Re: Re: mailman email harvester James Longstreet (Feb 08)
- Re: Re: mailman email harvester Dave Korn (Feb 09)
- Re: mailman email harvester Bernhard Kuemel (Feb 09)
- Re: Re: mailman email harvester James Longstreet (Feb 08)
- Message not available
- Re: mailman email harvester Bernhard Kuemel (Feb 09)
- Re: mailman email harvester Dave Korn (Feb 08)
- <Possible follow-ups>
- Re: Re: mailman email harvester J b (Feb 08)