[olug] Why does OLUG use plain text passwords?

[Jon Larsen]

>From the docs:

"A user may disable monthly reminders for a single list on a server, or for
all lists on a server.  To do this, go to your options page (yes, you will
need your password to do this!) and scroll down to the section that says "*Get
password reminder email for this list?*".  Click on *No* and then *Submit
My Changes* at the bottom of the page.  If you want to disable password
reminders for every mailing list you are subscribed to (with that email
address) on the server, click the *Set globally* checkbox underneath the
*No *button. "



On Tue, May 1, 2018 at 3:50 PM, Justin Reiners <justin at hotlinesinc.com>
wrote:

> or change the emailed password to a hardcoded string of hunter2
>
> On Tue, May 1, 2018 at 3:40 PM, Ben Hollingsworth <obiwan at jedi.com> wrote:
>
> > Can we at least stop emailing out the plaintext passwords every month?
> >
> >
> > On May 1, 2018 3:11:38 PM CDT, Benjamin Brinkman <
> ben at benjaminbrinkman.com>
> > wrote:
> > >I get that mailman has been the de facto standard for free software
> > >projects for a long time, but there has to be a more secure
> > >alternative by now. It's good that mailman is so ubiquitous because
> > >that's a testament to its stability, but surely someone else has
> > >achieved that along with better security by now.
> > >
> > >I have never run a mailing list so I have no specific suggestions.
> > >Just pointing out that new things can emerge over time.
> > >
> > >On Tue, May 1, 2018 at 1:05 PM, Rex Dieter <rdieter at gmail.com> wrote:
> > >> It's just standard mailman (mis)feature/bug.
> > >>
> > >> -- rex
> > >>
> > >> On Tue, May 1, 2018 at 2:57 PM Sasha Karcz <sasha at karcz.me> wrote:
> > >>
> > >>> In the olug.org mailing list memberships reminder emails, we get
> > >sent our
> > >>> email address as well as our password. This implies that olug stores
> > >>> passwords in plain text. Why in 2018 are we doing that?
> > >>>
> > >>> Sent with [ProtonMail](https://protonmail.com) Secure Email.
> > >>> _______________________________________________
> > >>> OLUG mailing list
> > >>> OLUG at olug.org
> > >>> https://www.olug.org/mailman/listinfo/olug
> > >>>
> > >> _______________________________________________
> > >> OLUG mailing list
> > >> OLUG at olug.org
> > >> https://www.olug.org/mailman/listinfo/olug
> > >_______________________________________________
> > >OLUG mailing list
> > >OLUG at olug.org
> > >https://www.olug.org/mailman/listinfo/olug
> >
> > --
> > Ben "Obi-Wan" Hollingsworth
> > obiwan at jedi.com, http://www.jedi.com
> > _______________________________________________
> > OLUG mailing list
> > OLUG at olug.org
> > https://www.olug.org/mailman/listinfo/olug
> >
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://www.olug.org/mailman/listinfo/olug
>