[aur-general] Password sent every month ?

[G. Schlisio]

> Hi there !
> Just new here.
> And I've been informed that "Normally, Mailman will remind you of your
> archlinux.org mailing list passwords once every month".
> Does it mean the passwords are saved somewhere ?!
> That means that my password is sent periodically. That's not the only
> account for which I use this password.
> That is a HUGE security breach. Please, change that system.
> 
> And by the way, hello there, fellow arch users and devs ;)

hi and welcome aboard arch!

concerning your issue:
you probably have heard the advice to use different passwords everywhere?
also: the mailinglist password is not that important. it merely controls
your subscription, so no sensible data is secured with it, it just
prevents random people from fiddling with your subscription.
that brings me to my next point: arch uses a software called mailman
here, a mailinglist managing tool used widely on the interwebs, reviewed
many times.
you can also opt-out of receiving this reminder in your subscription
options (protected by this password).

i hope you see that this is not an security issue, but perhaps you want
to change you maiman-password.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/aur-general/attachments/20150613/0952418f/attachment.asc>