Hi, It's me who have claimed the team for prevent this to happen. Administrators of Pkg-javascript please reclaimed the launchpad team.
Freely, Valentin OVD > From: [email protected] > To: [email protected]; [email protected] > Date: Fri, 23 Jan 2015 16:34:23 -0500 > Subject: Re: [Pkg-javascript-devel] Launchpad: Claim existing team > > On Fri 2015-01-23 15:17:19 -0500, Launchpad wrote: > > > vovd (vovd) tried to claim the Launchpad > > team named Debian Javascript Maintainers (pkg-javascript-devel-lists) > > (which is > > associated with [email protected]). > > > > To finish claiming that team, making vovd (vovd) > > its owner, just follow the link below. > > > > https://launchpad.net/token/s82RbqGNq9Zn29808FhD > > This is a troubling situation. Launchpad sends this token, but the > owner is a publicly-archived mailing list. > > All an attacker needs to do is submit a request to claim the team, then > read the archive to find the token and claim the team. > > Should launchpad have a warning against assigning group ownership to a > public mailing list? > > fwiw, i've been on the Debian Javascript Maintainers mailing list for > over a year and i've never heard of anyone named vovd. > > --dkg > > _______________________________________________ > Pkg-javascript-devel mailing list > [email protected] > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
_______________________________________________ Pkg-javascript-devel mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
