linux-kernel - Re: Unsubscription Incident

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 26 Oct 2021 20:02:27 -0400
From:   Slade Watkins <slade@...dewatkins.com>
To:     Cong Wang <xiyou.wangcong@...il.com>
Cc:     Lijun Pan <lijunp213@...il.com>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Networking <netdev@...r.kernel.org>
Subject: Re: Unsubscription Incident

Hi,
On Mon, Oct 25, 2021 at 4:10 PM Cong Wang <xiyou.wangcong@...il.com> wrote:
>
> On Fri, Oct 22, 2021 at 10:53:28AM -0500, Lijun Pan wrote:
> > Hi,
> >
> > From Oct 11, I did not receive any emails from both linux-kernel and
> > netdev mailing list. Did anyone encounter the same issue? I subscribed
> > again and I can receive incoming emails now. However, I figured out
> > that anyone can unsubscribe your email without authentication. Maybe
> > it is just a one-time issue that someone accidentally unsubscribed my
> > email. But I would recommend that our admin can add one more
> > authentication step before unsubscription to make the process more
> > secure.
> >
>
> Same here.
>
> Fortunately I just switched to lei:
> https://josefbacik.github.io/kernel/2021/10/18/lei-and-b4.html
> so I can unsubscribe all kernel mailing lists now.

Not a bad workaround! I may consider trying this out. Thanks for
sending this along.

I'd still love to figure out why the whole "randomly unsubscribing
people who want to be subscribed" thing is happening in the first
place, though.

>
> Thanks.

Cheers,
             -slade