[MLB-WIRELESS] mailing list security

Peter Mitchell dcd at internode.on.net
Tue Mar 11 23:26:03 EST 2003


I have noticed that the server gives out everyones email addresses without
any trouble @ all.

This seems to me, a very big loophole !!

Please email me if the admins require help fixing this security problem

mail at peterlauren.com

Peter


----- Original Message -----
From: "Andrew Griffiths" <andrewg at d2.net.au>
To: <melbwireless at wireless.org.au>
Sent: Monday, March 10, 2003 9:13 AM
Subject: Re: [MLB-WIRELESS] mailing list security


> Looks like I replied to the person and not the group. My comments inline.
>
> - andrewg
>
> Andrew Griffiths wrote:
> > Peter Mitchell wrote:
> >
> >> Whos in charge of mailing list security ?
> >>
> >> I'm worried that non members can get my email address, even if I didn't
> >> post.
> >
> >
> > Well, since SMTP is mostly unencrypted (some smtp servers can upgrade to
> > SSL on the fly) anyone doing a passive sniff on the wire (either where
> > the mail server is coloco'd, or near your end), I'd be of the oponion
> > several to a dozen have your email address :P
> >
> > That said, someone may be able to access the mailing list members,
> > either by breaking into it, possibly colocating where the server is, or
> > bribing someone.
> >
> >>
> >> Peter
> >>
> >>
> >> To unsubscribe: send mail to majordomo at wireless.org.au
> >> with "unsubscribe melbwireless" in the body of the message
> >>
> >>
> >>
> >
> > Thanks,
> > Andrew Griffiths
> >
>
>
>
> --
> *** Toby has joined #melb-wireless
> <Toby> im awake
> <txrx> thats apparent.
>
>
> To unsubscribe: send mail to majordomo at wireless.org.au
> with "unsubscribe melbwireless" in the body of the message
>


To unsubscribe: send mail to majordomo at wireless.org.au
with "unsubscribe melbwireless" in the body of the message



More information about the Melbwireless mailing list