If it makes you feel better, I almost opened a ticket about this last week
or so with Infra.
----- Original Message -----
From: "Warren Togami" <[email protected]>
To: "Kevin A. McGrail" <[email protected]>
Cc: "SpamAssassin Dev" <[email protected]>
Sent: Friday, September 04, 2009 9:43 AM
Subject: Re: Reset Moin Password broken?
On 09/04/2009 09:38 AM, Kevin A. McGrail wrote:
Have you tried cutting and pasting the {SHA1}... code in as your
password? I was told this might magically work but that does seem to be
a completely ridiculous security pattern as if you get ahold of the
encrypted version, you can still login as someone else using this method.
Regards,
KAM
Wow, that worked. That is indeed silly.
Warren
