Re: [Pkg-javascript-devel] Launchpad: Claim existing team
Hi, On Fri, 2015-01-23 at 22:40 +0100, valentin OVD wrote: Hi, It's me who have claimed the team for prevent this to happen. Administrators of Pkg-javascript please reclaimed the launchpad team. pkg-javascript-devel is already in the Lauchpad since 2008 [0] and pkg-javascript-devel-lists since 2011. [0] https://launchpad.net/~pkg-javascript-devel [1] https://launchpad.net/~pkg-javascript-devel-lists Anyone know if I can merge it? Cheers, -- Marcelo Jorge Vieira xmpp:me...@jabber-br.org http://metaldot.alucinados.com signature.asc Description: This is a digitally signed message part ___ Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
Re: [Pkg-javascript-devel] Launchpad: Claim existing team
Quoting Marcelo Jorge Vieira (2015-01-26 14:41:04) On Fri, 2015-01-23 at 22:40 +0100, valentin OVD wrote: It's me who have claimed the team for prevent this to happen. Administrators of Pkg-javascript please reclaimed the launchpad team. pkg-javascript-devel is already in the Lauchpad since 2008 [0] and pkg-javascript-devel-lists since 2011. [0] https://launchpad.net/~pkg-javascript-devel [1] https://launchpad.net/~pkg-javascript-devel-lists Anyone know if I can merge it? Your questions seems specific to Ubuntu/Canonical to me. This is a Debian mailinglist. Ubuntu developers and/or Canonical employes might be listening here, but I guess you have far better chances getting in touch with them at their own lists/forums/whatever. Kind regards, - Jonas -- * Jonas Smedegaard - idealist Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature ___ Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Launchpad: Claim existing team
Hi, vovd (vovd) tried to claim the Launchpad team named Debian Javascript Maintainers (pkg-javascript-devel-lists) (which is associated with pkg-javascript-devel@lists.alioth.debian.org). To finish claiming that team, making vovd (vovd) its owner, just follow the link below. https://launchpad.net/token/s82RbqGNq9Zn29808FhD The Launchpad Team ___ Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
Re: [Pkg-javascript-devel] Launchpad: Claim existing team
Hi, It's me who have claimed the team for prevent this to happen. Administrators of Pkg-javascript please reclaimed the launchpad team. Freely, Valentin OVD From: d...@fifthhorseman.net To: feedb...@launchpad.net; pkg-javascript-devel@lists.alioth.debian.org Date: Fri, 23 Jan 2015 16:34:23 -0500 Subject: Re: [Pkg-javascript-devel] Launchpad: Claim existing team On Fri 2015-01-23 15:17:19 -0500, Launchpad wrote: vovd (vovd) tried to claim the Launchpad team named Debian Javascript Maintainers (pkg-javascript-devel-lists) (which is associated with pkg-javascript-devel@lists.alioth.debian.org). To finish claiming that team, making vovd (vovd) its owner, just follow the link below. https://launchpad.net/token/s82RbqGNq9Zn29808FhD This is a troubling situation. Launchpad sends this token, but the owner is a publicly-archived mailing list. All an attacker needs to do is submit a request to claim the team, then read the archive to find the token and claim the team. Should launchpad have a warning against assigning group ownership to a public mailing list? fwiw, i've been on the Debian Javascript Maintainers mailing list for over a year and i've never heard of anyone named vovd. --dkg ___ Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel ___ Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
Re: [Pkg-javascript-devel] Launchpad: Claim existing team
On Fri 2015-01-23 15:17:19 -0500, Launchpad wrote: vovd (vovd) tried to claim the Launchpad team named Debian Javascript Maintainers (pkg-javascript-devel-lists) (which is associated with pkg-javascript-devel@lists.alioth.debian.org). To finish claiming that team, making vovd (vovd) its owner, just follow the link below. https://launchpad.net/token/s82RbqGNq9Zn29808FhD This is a troubling situation. Launchpad sends this token, but the owner is a publicly-archived mailing list. All an attacker needs to do is submit a request to claim the team, then read the archive to find the token and claim the team. Should launchpad have a warning against assigning group ownership to a public mailing list? fwiw, i've been on the Debian Javascript Maintainers mailing list for over a year and i've never heard of anyone named vovd. --dkg ___ Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
