Bug#359905: PTS: unsubscription fraud possible

2006-03-30 Thread MJ Ray
Raphael Hertzog <[EMAIL PROTECTED]> > On Wed, 29 Mar 2006, MJ Ray wrote: > > In any case, why was the bug marked done if it's known, > > but won't be fixed? > > Because I believe it's not a bug but a feature. It can even help to be > able to unsubscribe someone else who has troubles unsubscribing

Bug#359905: PTS: unsubscription fraud possible

2006-03-30 Thread Raphael Hertzog
On Thu, 30 Mar 2006, MJ Ray wrote: > > Because I believe it's not a bug but a feature. It can even help to be > > able to unsubscribe someone else who has troubles unsubscribing alone. > > Respectfully, I disagree. This bug is making the PTS > unreliable for co-maintainers. Several persons compla

Bug#359905: PTS: unsubscription fraud possible

2006-03-30 Thread MJ Ray
Raphael Hertzog <[EMAIL PROTECTED]> > Several persons complained of the *risk* but you're the first one who > tells us that he has been unsubscribed by someone with malicious intent. I have no way of telling whether or not I was, as I didn't notice soon enough to check the logs. I hope it's more l

Bug#359905: PTS: unsubscription fraud possible

2006-03-30 Thread Raphael Hertzog
On Thu, 30 Mar 2006, MJ Ray wrote: > > I'll include a patch which changes the subject to "Unsubscription notice" > > or something similar. > > You'll prepare it, or accept it when it arrives? Accept it if it arrives. :-) > > The best solution would be be to implement the bounce handler (with > >

Bug#360075: RM: kernel-patch-tekram-dc3x5 -- Obsolete kernel patch

2006-03-30 Thread Francesco P. Lovergine
Package: ftp.debian.org Severity: normal This patch is not updated upstream since 2002 and works with 2.2 an 2.4 kernel series only AFAIK. Last upload is dated 2002-09-26 and there's a RFA (#190563) open since ages. I suggest to remove this package from archives. -- Francesco P. Lovergine --

Bug#359905: PTS: unsubscription fraud possible

2006-03-30 Thread Thomas Bushnell BSG
MJ Ray <[EMAIL PROTECTED]> writes: > They have an attacker-specified subject line and can be loaded > with content after the stop command, to trigger spam traps. > If you expect users to flag up these messages, how can they > spot them? I recall you insisting that false positives were not a serio

Bug#359905: PTS: unsubscription fraud possible

2006-03-30 Thread MJ Ray
Thomas Bushnell BSG <[EMAIL PROTECTED]> > I recall you insisting that false positives were not a serious problem > with spam detection systems. > > I'm glad you now disagree with your previous position. I'm pretty sure you're mistaken. For example, "Any false-positive listing and you bounce valid