[TriLUG] amazed and concerned - mailing list membership info reminders

[Mike Viscount via TriLUG]

Putting all that info in the same email is just a bad, terrible thing to
do. Security 101


On Wed, Nov 1, 2023 at 9:16 AM Zach Underwood via TriLUG <trilug at trilug.org>
wrote:

> It should be pointed out that between the  trilug mailman server and gmail
> servers it was running in TLS so no man in the middle could see the info.
> Now the mailman server and gmail servers can read that info.
>
> On Wed, Nov 1, 2023 at 8:51 AM shay walters via TriLUG <trilug at trilug.org>
> wrote:
>
> > Just speaking for myself, I never re-use passwords on different
> > services, so the only thing that is in peril is my feed of messages
> > from this specific group.  Somebody could post messages as me, but I
> > should notice something like that pretty quickly.  My bigger concern
> > would be how somebody got the (admittedly unencrypted) monthly group
> > reminder out of my email.
> >
> > On Wed, Nov 1, 2023 at 8:33 AM Mike Viscount via TriLUG
> > <trilug at trilug.org> wrote:
> > >
> > > I've always been amazed that the monthly trilug membership list
> reminders
> > > go out ... and still go out.  I mean ... like ... really?  It seems
> like
> > > it's a monthly exercise in compromising every trilug account.  login
> info
> > > and passwords and no effort to even hide them.
> > >
> > > So my question is - why is it done?
> > > --
> > > This message was sent to: Shay Walters <shaywalters at gmail.com>
> > > To unsubscribe, send a blank message to trilug-leave at trilug.org from
> > that address.
> > > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> > > Unsubscribe or edit options on the web  :
> > https://www.trilug.org/mailman/options/trilug/shaywalters%40gmail.com
> > > Welcome to TriLUG: https://trilug.org/welcome
> > --
> > This message was sent to: Zach Underwood <zunder1990 at gmail.com>
> > To unsubscribe, send a blank message to trilug-leave at trilug.org from
> that
> > address.
> > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> > Unsubscribe or edit options on the web  :
> > https://www.trilug.org/mailman/options/trilug/zunder1990%40gmail.com
> > Welcome to TriLUG: https://trilug.org/welcome
>
>
>
> --
> Zach Underwood (RHCE,RHCSA,RHCT,UACA)
> My website <http://zachunderwood.me>
> advance-networking.com
> --
> This message was sent to: MikeV <mviscount at gmail.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
> address.
> TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  :
> https://www.trilug.org/mailman/options/trilug/mviscount%40gmail.com
> Welcome to TriLUG: https://trilug.org/welcome