I was able to do an authenticated checkout at about 1am EST last night, but they're definitely mucking around with their cvs servers. I noticed the checkin message now seemed to come from email@example.com. I don't know if this is a permanent change, but it certainly mucked up the Mailman sender filters. :/
Checking now, it looks like non-anon cvs is working ok.
I haven't been able to connect since the last wednesday or so (cvs update just hangs until it times out).
If this persists, someone else will have to check in my SRE patches...