netdev - Re: Unsubscription Incident

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1d5ccba0-d607-aabc-6bd1-0e7c754c8379@infradead.org>
Date:   Wed, 27 Oct 2021 12:29:34 -0700
From:   Randy Dunlap <rdunlap@...radead.org>
To:     Slade Watkins <slade@...dewatkins.com>,
        Cong Wang <xiyou.wangcong@...il.com>
Cc:     Lijun Pan <lijunp213@...il.com>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Networking <netdev@...r.kernel.org>
Subject: Re: Unsubscription Incident

On 10/26/21 5:02 PM, Slade Watkins wrote:
> Hi,
> On Mon, Oct 25, 2021 at 4:10 PM Cong Wang <xiyou.wangcong@...il.com> wrote:
>>
>> On Fri, Oct 22, 2021 at 10:53:28AM -0500, Lijun Pan wrote:
>>> Hi,
>>>
>>>  From Oct 11, I did not receive any emails from both linux-kernel and
>>> netdev mailing list. Did anyone encounter the same issue? I subscribed
>>> again and I can receive incoming emails now. However, I figured out
>>> that anyone can unsubscribe your email without authentication. Maybe
>>> it is just a one-time issue that someone accidentally unsubscribed my
>>> email. But I would recommend that our admin can add one more
>>> authentication step before unsubscription to make the process more
>>> secure.
>>>
>>
>> Same here.
>>
>> Fortunately I just switched to lei:
>> https://josefbacik.github.io/kernel/2021/10/18/lei-and-b4.html
>> so I can unsubscribe all kernel mailing lists now.
> 
> Not a bad workaround! I may consider trying this out. Thanks for
> sending this along.
> 
> I'd still love to figure out why the whole "randomly unsubscribing
> people who want to be subscribed" thing is happening in the first
> place, though.

Then you should try <postmaster@...r.kernel.org> for assistance.

-- 
~Randy