[Pkg-javascript-devel] Launchpad: Claim existing team

[valentin OVD]

Hi,
It's me who have claimed the team for prevent this to happen.
Administrators of Pkg-javascript please reclaimed the launchpad team.

Freely,
Valentin OVD 


> From: dkg at fifthhorseman.net
> To: feedback at launchpad.net; pkg-javascript-devel at lists.alioth.debian.org
> Date: Fri, 23 Jan 2015 16:34:23 -0500
> Subject: Re: [Pkg-javascript-devel] Launchpad: Claim existing team
> 
> On Fri 2015-01-23 15:17:19 -0500, Launchpad wrote:
> 
> > vovd (vovd) tried to claim the Launchpad
> > team named Debian Javascript Maintainers (pkg-javascript-devel-lists) (which is
> > associated with pkg-javascript-devel at lists.alioth.debian.org).
> >
> > To finish claiming that team, making vovd (vovd)
> > its owner, just follow the link below.
> >
> >     https://launchpad.net/token/s82RbqGNq9Zn29808FhD
> 
> This is a troubling situation.  Launchpad sends this token, but the
> owner is a publicly-archived mailing list.
> 
> All an attacker needs to do is submit a request to claim the team, then
> read the archive to find the token and claim the team.
> 
> Should launchpad have a warning against assigning group ownership to a
> public mailing list?
> 
> fwiw, i've been on the Debian Javascript Maintainers mailing list for
> over a year and i've never heard of anyone named vovd.
> 
>      --dkg
> 
> _______________________________________________
> Pkg-javascript-devel mailing list
> Pkg-javascript-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20150123/5dbf8555/attachment.html>