[aur-general] No confirmation link received

Xyne xyne at archlinux.ca
Thu Sep 20 16:13:03 EDT 2012


Evangelos Foutras wrote:

>On Wed, Sep 19, 2012 at 5:54 PM, Sandro Munda <munda.sandro at gmail.com> wrote:
>> My username is: seyz
>
>The email address for that account is: kuppidon at gmail.com -- use this
>in the password reset page to regain access to your account.

The request seems legitimate but nevertheless I do not think that TUs should
divulge user email addresses on the mailing list. It makes it trivial to
use social engineering to obtain someone's email address (e.g. an e-stalker may
very well know the registered name of a given user).

It would be better to send an email to the registered address to confirm
identity. If it bounces then the email can be reset or the account
deleted/suspended.


More information about the aur-general mailing list