Hi Karl.

When you get a confirmation code, it means that someone was able to forge your 
email (this is not hard to do).

If you post the confirmation code to the public cypherpunks list, then the same 
culprit just needs to send that confirmation code in another forged email.

So, you should not be posting those confirmation codes!

In order to get the confirmation code otherwise, someone would need to 
intercept your incoming email messages (or, perhaps, the outgoing messages from 
the list server). That is rather harder than forging an email.

  ~ Greg

On Fri, May 13, 2022 at 05:37:00PM -0400, Karl Semich wrote:
> >
> >
> >> When an address is unsubscribed, they get a goodbye email from the list
> >> software. Did that happen?
> >>
> >
> > I'm not seeing this.
> >
> 
> I ended up finding this for [email protected] but not [email protected] .
> [email protected] was unsubscribed by someone else at 1058-0500 today, after
> posting a partial unsub code publicly that I was surprised to receive,
> which would presumably have required brute forcing the server to use as it
> was missing trailing digits. [email protected] has bounce notices but no
> unsubscription notices, and did not receive nor share an unsub code that I
> saw.
> 
> It was a little surprising that the bounce notices come from
> cypherpunks-owner whereas the farewell messages come from
> cypherpunks-bounces.
> 
> >

Reply via email to