[Mailman-Developers] Mailing lists exploited

[Daniel Kahn Gillmor]

On Tue 2017-05-16 13:29:21 +0100, Jonathan Knight wrote:

> I think the real name if its available and the list owner address if not.
> If you use the local part (e.g. j.knight) would still make it possible to
> guess the @keele.ac.uk if the mailing lists are all hosted on
> maillists.keele.ac.uk.

surely it's easy for an attacker to guess moderation-free sender
addresses by a quick scan of the list archives as well.  what attackers
are we really trying to defend against here?

    --dkg