Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!goblin1!goblin.stu.neva.ru!uio.no!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <kwpolska@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.064
X-Spam-Evidence: '*H*': 0.87; '*S*': 0.00; 'utf-8': 0.07; 'messing': 0.09; 'occasionally': 0.09; 'cc:addr:python-list': 0.11; '**do': 0.16; 'cleartext.': 0.16; 'password,': 0.16; 'readable': 0.16; 'subject:received': 0.16; 'text?': 0.16; 'prevent': 0.16; 'wrote:': 0.18; 'options.': 0.19; 'cc:addr:python.org': 0.22; 'month,': 0.24; 'cc:2**0': 0.24; 'cc:no real name:2**0': 0.24; '15,': 0.26; 'first,': 0.26; 'least': 0.26; 'header:In-Reply- To:1': 0.27; 'chris': 0.29; 'am,': 0.29; 'subject:list': 0.30; 'message-id:@mail.gmail.com': 0.30; 'url:mailman': 0.30; 'second,': 0.31; 'url:python': 0.33; 'fri,': 0.33; 'plain': 0.33; 'actual': 0.34; 'sense': 0.34; 'subject:from': 0.34; 'info': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'really': 0.36; 'passwords': 0.36; 'url:listinfo': 0.36; 'url:org': 0.36; 'should': 0.36; 'two': 0.37; 'server': 0.38; 'confirmed': 0.38; 'nov': 0.38; 'security,': 0.38; 'rather': 0.38; 'does': 0.39; 'bad': 0.39; 'url:mail': 0.40; 'privacy': 0.61; 'from:charset:utf-8': 0.61; 'back': 0.62; "you've": 0.63; 'personal': 0.63; 'valuable': 0.63; 'choose': 0.64; 'account': 0.65; 'skip:\xe2 10': 0.65; 'business': 0.70; 'below.': 0.71; '8bit%:43': 0.74; 'url:tk': 0.95; '2013': 0.98
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=zxKdGs+S7Y0S9jNX4IslYxwZtsMdueVgSHfihVS0Uqs=; b=cdjeqAqgKbbrSi+6HvmEEWBQe23etihwqZQ50AjLIiM3p0IzhRoOFIRJi290pD9wNE Ovgm8EnxsY5kSM7Wcm+Vyic8TvlWMMnR/6UhsSch378p6HMhAQDTMdYWrCjONqNkxbNE zcy4KVhbQcVCVekBkLhK1f3yssFFxlR07CxNKPN55jdIYdQx8wP7x+lA4M3vfMqbcV8D TWlsNgnchonbNfLCWTZY8MSouZPEG8O+iT5wF2w1lsmUEPhZlGJ7K+l8e+s8BlTMF9oO 7Prnf4BOvG/x9Q7Xvwbk2bbCcZ0zpv+y2zvGamjM7AKY/iT3xJq0A3FVF4pktY6+l8el K/xg==
MIME-Version: 1.0
X-Received: by 10.50.129.39 with SMTP id nt7mr5655722igb.13.1384544881058; Fri, 15 Nov 2013 11:48:01 -0800 (PST)
In-Reply-To: <bel4phF163sU1@mid.individual.net>
References: <mailman.2591.1384437196.18130.python-list@python.org> <bel4phF163sU1@mid.individual.net>
Date: Fri, 15 Nov 2013 20:48:01 +0100
Subject: Re: Odd msg received from list
From: =?UTF-8?B?Q2hyaXMg4oCcS3dwb2xza2HigJ0gV2Fycmljaw==?= <kwpolska@gmail.com>
To: Gregory Ewing <greg.ewing@canterbury.ac.nz>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Cc: python-list@python.org
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.2684.1384544891.18130.python-list@python.org>
Lines: 32
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1384544891 news.xs4all.nl 15893 [2001:888:2000:d::a6]:59181
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:59560

On Fri, Nov 15, 2013 at 12:30 AM, Gregory Ewing
<greg.ewing@canterbury.ac.nz> wrote:
> Verde Denim wrote:
>>
>> The message also listed my
>> account password, which I found odd.
>
>
> You mean the message contained your actual password,
> in plain text? That's not just odd, it's rather worrying
> for at least two reasons. First, what business does a
> message like that have carrying a password, and second,
> it means the server must be keeping passwords in a
> readable form somewhere, which is a really bad idea.

>From the info page at https://mail.python.org/mailman/listinfo/python-list:

> You may enter a privacy password below. This provides only mild
> security, but should prevent others from messing with your
> subscription. **Do not use a valuable password** as it will
> occasionally be emailed back to you in cleartext.

> If you choose not to enter a password, one will be automatically
> generated for you, and it will be sent to you once you've confirmed
> your subscription.  You can always request a mail-back of your
> password when you edit your personal options. Once a month, your
> password will be emailed to you as a reminder.

--=20
Chris =E2=80=9CKwpolska=E2=80=9D Warrick <http://kwpolska.tk>
PGP: 5EAAEA16
stop html mail | always bottom-post | only UTF-8 makes sense