From: Michael Jackson Date: 2010-04-16T07:40:53+09:00 Subject: Re: Who maintains ruby-talk? Good for you for getting a response from the controller! As I stated a few days ago, all of my attempts to communicate with the MLM controller from my Gmail account failed. I have yet to run the script. This should be interesting... -- Michael Jackson http://mjijackson.com/ @mjijackson On Thu, Apr 15, 2010 at 11:54 AM, Walton Hoops wrote: > On 4/15/2010 11:27 AM, Walton Hoops wrote: >> On 4/15/2010 10:57 AM, Tony Arcieri wrote: >> >>> On Thu, Apr 15, 2010 at 10:50 AM, Walton Hoops wrote: >>> >>> >>> >>>> Actually, all that will do is cause the user to get a confirmation >>>> e-mail asking if they really want to unsubscribe.  I suppose it could >>>> lead to some annoying spam, but I hardly think it's a critical security >>>> bug. >>>> >>>> >>>> >>> That's what a secure MLM would do.  The ruby-talk one does not.  If you >>> don't believe me I can run it against your email address. >>> >>> >>> >> Go ahead, I already did. >> >> > Hmm... just a moment ago I got this e-mail: > > On 4/15/2010 11:50 AM, ruby-talk-admin@ruby-lang.org wrote: >> unsubscribe >> >> unsubscribe-confirm 2010041602504610836465093473 walton vyper.hopto.org >> >> Please reply this mail to confirm your unsubscribe request >> and send this to ruby-talk-ctl@ruby-lang.org >> If confirmed, you are removed from MAILING LIST . >> >> --ruby-talk@ruby-lang.org, Be Seeing You! >> >> ************************************************************ >> >>        Help: >> Unsubscribe: >> >> If you have any questions or problems, >>    please contact ruby-talk-admin@ruby-lang.org >>        or >>    send e-mail with the body "help"(without quotes) to >>       ruby-talk-ctl@ruby-lang.org >>       (here is the automatic reply, so more preferable) >> >> e.g. on a Unix Machine >> (shell prompt)% echo "help" |Mail ruby-talk-ctl@ruby-lang.org >> >> ************************************************************ >> >> > I wonder how that could have happened ;-) > >