https://bugzilla.wikimedia.org/show_bug.cgi?id=26227

Daniel Friesen <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mediawiki-bugs@nadir-seen-f
                   |                            |ire.com

--- Comment #4 from Daniel Friesen <[email protected]> 
2011-03-20 05:27:29 UTC ---
Currently we have an account swiping problem. If someone gains access to a
session, they can escalate that to exclusive full account control by changing
the e-mail and using password reset. This process has no notifications (which
should be in place) to warn the user that their account has been swiped.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to