[TriLUG] amazed and concerned - mailing list membership info reminders

[Mike Viscount via TriLUG]

>> Putting all that info in the same email is just a bad, terrible thing to
do. Security 101

 I should have added ... especially for a password that isn't even
temporary / time constrained.



On Wed, Nov 1, 2023 at 10:06 AM Mike Viscount <mviscount at gmail.com> wrote:

>
> Putting all that info in the same email is just a bad, terrible thing to
> do. Security 101
>
>
> On Wed, Nov 1, 2023 at 9:16 AM Zach Underwood via TriLUG <
> trilug at trilug.org> wrote:
>
>> It should be pointed out that between the  trilug mailman server and gmail
>> servers it was running in TLS so no man in the middle could see the info.
>> Now the mailman server and gmail servers can read that info.
>>
>> On Wed, Nov 1, 2023 at 8:51 AM shay walters via TriLUG <trilug at trilug.org
>> >
>> wrote:
>>
>> > Just speaking for myself, I never re-use passwords on different
>> > services, so the only thing that is in peril is my feed of messages
>> > from this specific group.  Somebody could post messages as me, but I
>> > should notice something like that pretty quickly.  My bigger concern
>> > would be how somebody got the (admittedly unencrypted) monthly group
>> > reminder out of my email.
>> >
>> > On Wed, Nov 1, 2023 at 8:33 AM Mike Viscount via TriLUG
>> > <trilug at trilug.org> wrote:
>> > >
>> > > I've always been amazed that the monthly trilug membership list
>> reminders
>> > > go out ... and still go out.  I mean ... like ... really?  It seems
>> like
>> > > it's a monthly exercise in compromising every trilug account.  login
>> info
>> > > and passwords and no effort to even hide them.
>> > >
>> > > So my question is - why is it done?
>> > > --
>> > > This message was sent to: Shay Walters <shaywalters at gmail.com>
>> > > To unsubscribe, send a blank message to trilug-leave at trilug.org from
>> > that address.
>> > > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
>> > > Unsubscribe or edit options on the web  :
>> > https://www.trilug.org/mailman/options/trilug/shaywalters%40gmail.com
>> > > Welcome to TriLUG: https://trilug.org/welcome
>> > --
>> > This message was sent to: Zach Underwood <zunder1990 at gmail.com>
>> > To unsubscribe, send a blank message to trilug-leave at trilug.org from
>> that
>> > address.
>> > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
>> > Unsubscribe or edit options on the web  :
>> > https://www.trilug.org/mailman/options/trilug/zunder1990%40gmail.com
>> > Welcome to TriLUG: https://trilug.org/welcome
>>
>>
>>
>> --
>> Zach Underwood (RHCE,RHCSA,RHCT,UACA)
>> My website <http://zachunderwood.me>
>> advance-networking.com
>> --
>> This message was sent to: MikeV <mviscount at gmail.com>
>> To unsubscribe, send a blank message to trilug-leave at trilug.org from
>> that address.
>> TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
>> Unsubscribe or edit options on the web  :
>> https://www.trilug.org/mailman/options/trilug/mviscount%40gmail.com
>> Welcome to TriLUG: https://trilug.org/welcome
>
>