The mailing list for listmasters using Sympa

[Chip Salzenberg <address@concealed>]

According to Hugo:
> In <address@concealed>, Chip Salzenberg writes:
> :According to Hugo:
> :> Looking at sympa-2.5.2, I think the error is in src/Commands.pm, and
> :> should possibly change as in the attached patch; I'm not sure whether
> :> the '$which' address needs more validation before this is safe, though.
> :
> :Well, since the body of the auth request is entirely generated by
> :sympa, it can't be used for spamming.  So I think it'll be OK.
> 
> I thought the point of the authentication request was to stop one person
> from subscribing or unsubscribing an unwilling second party.

Oh.  Yeah.  That.  :-(  I've been so focussed on spam abuse lately that I
didn't even think about harrassment.  You're quite correct.
-- 
Chip Salzenberg              - a.k.a. -              <address@concealed>
"I wanted to play hopscotch with the impenetrable mystery of existence,
    but he stepped in a wormhole and had to go in early."  // MST3K