[Mailman-Developers] Found a privacy loophole...
Tue, 30 Nov 1999 12:08:24 -0600
In message <Pine.LNX.firstname.lastname@example.org>, R
ick Niess writes:
> Whoah. All I was pointing out was that attempting to hide the
>existence of a list to those viewing the listinfo index (by turning off
>the Advertize option) isn't entirely bulletproof. The listinfo index page
>specifically tells them how to get to the pages for lists that they know
>exist but aren't listed there, and then it provides a link to the list
>admin overview page which lists all existing lists, hidden or not.
Are you sure that your site works that way? If a list is unadvertised,
then it shouldn't show up on either the listinfo or admin pages. Are you
really seeing all the lists on the server on the admin page?
Ted Cabeen http://www.pobox.com/~secabeen email@example.com
Check Website or finger for PGP Public Key firstname.lastname@example.org
"I have taken all knowledge to be my province." -F. Bacon email@example.com
"Human kind cannot bear very much reality."-T.S.Eliot firstname.lastname@example.org