4 Jan
2022
4 Jan
'22
6:22 p.m.
On 2022-01-04 12:00:53 -0500 (-0500), Jason Poulin wrote:
Can someone take me off this list. I don’t know why I’m on it. Please. [...]
I've unsubscribed this user; it appears an attacker managed to brute-force a mailman confirmation key for a subscription request. This hole should hopefully be plugged once we migrate to Mailman v3, which employs stronger hashes for subscription confirmations. -- Jeremy Stanley