[Cryptography] Why is emailing me my password?

Greg greg at kinostudios.com
Tue Oct 1 10:28:48 EDT 2013


This falls somewhere in the land of beyond-the-absurd.

Just got this message from your robot:

On Oct 1, 2013, at 5:00 AM, mailman-owner at metzdowd.com wrote:

> If you have questions, problems, comments, etc, send them to
> mailman-owner at metzdowd.com.  Thanks!
> 
> Passwords for greg at kinostudios.com:
> 
> List                                     Password // URL
> ----                                     --------  
> cryptography at metzdowd.com                iPoopInYourHat
> http://www.metzdowd.com/mailman/options/cryptography/greg%40kinostudios.com

So, my password, iPoopInYourHat, is being sent to me in the clear by your servers.

Of all the places on the internet, this would be on the last places I would expect this to happen.

- Greg

--
Please do not email me anything that you are not comfortable also sharing with the NSA.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20131001/f08c4027/attachment.pgp>


More information about the cryptography mailing list