[ih] bogus list unsubscribe requests seen
touch at isi.edu
Mon Aug 22 09:54:49 PDT 2016
Activity of the sort below seems to have picked up.
AFAICT, it's correlated with posting something to the list, as if
something is scraping the list archives and issuing unsubscribes through
the web interface.
I've activated every available feature on the version of Mailman running
on our pre-2002 servers. The only news is that we do have modern
replacements being configured now, and I'm hoping that the updated
software has more options that help prevent this (e.g., CAPTCHA to issue
unsubscribe). I won't know until the servers are upgraded, which won't
be for a few more months, though.
For now, the same advice applies - if you didn't issue an unsubscribe
request, please ignore it.
Joe (as list admin)
On 7/19/2015 3:22 PM, Joe Touch wrote:
> Hi, all,
> Over the past few days, I've received four reports from recent posters
> to this list who have received list unsubscribe messages that they did
> not request.
> These messages appear to be generated from ISI's mailman system. The
> system does not require a login or confirmation to issue the unsubscribe
> to any email address - that is a "feature" of mailman, and I am not
> aware of a way to configure it otherwise.
> If you receive such a request and did not intend to unsubscribe, you can
> just ignore it.
> Joe (as list admin)
More information about the Internet-history