May 2007 - SFD-discuss - lists.mailman3.com

Hello from Macedonia

by Aleksandar Balalovski

Hello, this is the coordinator of the GNU/Linux user group of Bitola/Macedonia, Aleksandar Balalovski. We are registered as team to celebrate this year World SFD as event merged to the SFD of our city which is 21 September. We hope to get all the necessary support and requirements to make it successful and relevant event. Laterz -- Aleksandar Balalovski http://blog.gemidjy.info gemidjy(a)lugola.net Coordinator of the Lugola (www.lugola.net)

May 9, 2007

Re: [SFD-discuss] "Remind me" broken on wiki

by Russell John

On 5/9/07, Georg Sluyterman <georg(a)thecrew.dk> wrote: > Some people have a bad password habbit: They use one password for > several sites. > If someone intercept the message with the password in, only your account > on softwarefreedomday.org will be compromised. This reason is enough to generate "encrypted" passwords. Back in school days this was one of my techniques to hijack other people's accounts. ;) - Russell P.S. Any secret service agents on this list? > > -- > Regards > Georg Sluyterman > njlug.dk, Aalborg, Denmark > > _______________________________________________ > SFD-discuss mailing list > SFD-discuss(a)sf-day.org > http://mail.sf-day.org/lists/listinfo/sfd-discuss >

May 9, 2007

Re: [SFD-discuss] "Remind me" broken on wiki

by Georg Sluyterman

Alan Pope skrev: <---snip---> > Also how is this in any way more secure? If someone intercepts my mail they > can logon with my encrypted password in the same way I might, and change my > password? > > It's not a big deal, just odd. I don't know if its the reason: Some people have a bad password habbit: They use one password for several sites. If someone intercept the message with the password in, only your account on softwarefreedomday.org will be compromised. Also if a eg. a server harvest a e-mails, including the one with your password in it, your account will not be vulnerable after you have updated your password on softwarefreedomday.org. If it is compromised before you update your password you would be aware of it when you try to login to change your password (becaurse you are have to change it). Other than that, i can't se the purpose... :-/ -- Regards Georg Sluyterman njlug.dk, Aalborg, Denmark

May 9, 2007

Re: [SFD-discuss] "Remind me" broken on wiki

by Alan Pope

On Wed, May 09, 2007 at 05:57:28PM +0600, Russell John wrote: > Dear Alan, > > Putting the encrypted password would log you in. You can then change > your password and other details. The reason why it's not cleartext is > mentioned on the UserPreferences page: "...if someone intercepts the > mail, he won't know your REAL password". > How bizzare and completely different from every other wiki i have ever used. Also how is this in any way more secure? If someone intercepts my mail they can logon with my encrypted password in the same way I might, and change my password? It's not a big deal, just odd. Cheers, Al.

May 9, 2007

Re: [SFD-discuss] "Remind me" broken on wiki

by Russell John

Dear Alan, Putting the encrypted password would log you in. You can then change your password and other details. The reason why it's not cleartext is mentioned on the UserPreferences page: "...if someone intercepts the mail, he won't know your REAL password". Best regards, Russell On 5/9/07, Alan Pope <alan(a)popey.com> wrote: > Hi, > > I just went to the SFD wiki and used the "remind me of my password" thing > which sent me a mail containing my user ID but an SHA encrypted version of > my password. > > Surely it should send me my password in the clear? > > I actually remembered my password so was able to logon, but other users may > not be so lucky. > > Cheers, > Al. > > _______________________________________________ > SFD-discuss mailing list > SFD-discuss(a)sf-day.org > http://mail.sf-day.org/lists/listinfo/sfd-discuss >

May 9, 2007

"Remind me" broken on wiki

by Alan Pope

Hi, I just went to the SFD wiki and used the "remind me of my password" thing which sent me a mail containing my user ID but an SHA encrypted version of my password. Surely it should send me my password in the clear? I actually remembered my password so was able to logon, but other users may not be so lucky. Cheers, Al.

May 9, 2007

Re: [SFD-discuss] Registrations are open for SFD 2007!

by Georg Sluyterman

Russell John skrev: > I registered, and did got the confirmation e-mail... that means the > system is working properly. Did you check your spam folder for the > e-mail? > Hmm.. i looked several times, but did not find it in my spam folder, thats why i posted my question. But after a search in my spam folder i finally found it. Thanks for the help. -- Regards Georg Sluyterman njlug.dk, Aalborg, Denmark

May 8, 2007

Re: [SFD-discuss] Registrations are open for SFD 2007!

by Russell John

I registered, and did got the confirmation e-mail... that means the system is working properly. Did you check your spam folder for the e-mail? - Russell On 5/8/07, Georg Sluyterman <georg(a)thecrew.dk> wrote: > Pia Waugh skrev: > > Hi all! > > > > Registrations are open for Software Freedom Day 2007! > > > <---snip---> > > Hmm.. i got the screen where it says that i will recieve a confirming > e-mail, but i never recieved one (signed up yesturday). Is the formular > broke, or did i do anything wrong? > > Maybe the e-mail was eaten by Thunderbird.. ;-) > > -- > Regards > Georg Sluyterman > njlug.dk, Aalborg, Denmark > > _______________________________________________ > SFD-discuss mailing list > SFD-discuss(a)sf-day.org > http://mail.sf-day.org/lists/listinfo/sfd-discuss >

May 8, 2007

Re: [SFD-discuss] Registrations are open for SFD 2007!

by Georg Sluyterman

Pia Waugh skrev: > Hi all! > > Registrations are open for Software Freedom Day 2007! > <---snip---> Hmm.. i got the screen where it says that i will recieve a confirming e-mail, but i never recieved one (signed up yesturday). Is the formular broke, or did i do anything wrong? Maybe the e-mail was eaten by Thunderbird.. ;-) -- Regards Georg Sluyterman njlug.dk, Aalborg, Denmark

May 8, 2007

Re: [SFD-discuss] Celebrate SFD at educational institutions.

by Matt Oquist

Hi Janet, Looks good! Could you please add the URL to http://softwarefreedomday.org/press ? Thanks, Matt Janet Hawtin wrote: [Tue May 08 2007, 03:34:47AM EDT] > Hi folks > > Got a bit of a start on promoting SFD for Australian education > organisations. > Hope it helps > > Janet > > http://kt.flexiblelearning.net.au/tkt2007/edition-13/soapbox-open-source-fo… > > _______________________________________________ > SFD-discuss mailing list > SFD-discuss(a)sf-day.org > http://mail.sf-day.org/lists/listinfo/sfd-discuss -- --------------------------------------------------------- SoftwareFreedomDay.org : Celebrating Free and Open Source Software in Your Community info AT softwarefreedomday.org http://softwarefreedomday.org/ SFD Sponsors: http://canonical.com http://ibm.com Software Freedom Day is a project of Software Freedom International. Software Freedom International is a registered corporation in the state of New Hampshire, USA.

May 8, 2007