<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Dear Robert</div><div><br></div><div>I am not an administrator of this list, neither an IT guy, just passing you the information I have got.<br></div><div>As far as I understand, the Quantum Espresso Users Forum is using version 2.1.15 of GNU Mailing List Manager and the current version is
3.2.0, please have a look at <a href="http://www.list.org/">http://www.list.org/</a>.</div><div>There is a long discussion from November 2011 forum among the users about the issue of plain text passwords sent by email. I suggest you to have a look.<br></div><div></div><div><a name="72445"></a>
</div><div><a href="https://mail.python.org/pipermail/mailman-users/2011-November/thread.html">https://mail.python.org/pipermail/mailman-users/2011-November/thread.html</a><br>
The discussion starts with an email titled "How to turn off plain text passwords?" and goes on at least 15 email exchanges.</div><div>Apparently, it is a known issue among the developers and it is how Mailman version 2 is set up. As far as I understand, passwords are even stored with an encryption which is slightly outdated and can be "figured out" by some effort with the current technology. <br></div><div>Long story short Version 2 of Mailman software is not the most secure thing on earth.<br></div><div>1- The ultimate way of solving this problem for everybody is installing Version 3.X.</div><div>2- Partial solution for you (if you do not trust your email provider) switch off receiving monthly emails.</div><div>3- Another partial solution for you is to use a "dummy" password that you do not use elsewhere.</div><div>4- The ultimate solution for you is to unsubscribe from the list.<br></div><div><br></div><div>Regards<br></div><div><br></div><div><br></div><div><br></div><div><br><br><br><br>
</div></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, 2 Oct 2018 at 00:56, Robert Molt <<a href="mailto:r.molt.chemical.physics@gmail.com">r.molt.chemical.physics@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p>Sirs and Madames:</p>
<p>There is a significant security lapse for this list-serv. The
mailing list monthly reminder writes the user's password out, in
the email. This is <b>not </b>acceptable security practice in
the present day; it is not OK to ever have an email list out a
user's password for any reason. It is important to not allow one
compromised account (say, email) lead to further compromises.<br>
</p>
<p>I please ask that this be remedied. <br>
</p>
<pre class="m_-6670821492050984875moz-signature" cols="72">--
Dr. Robert Molt Jr.
<a class="m_-6670821492050984875moz-txt-link-abbreviated" href="mailto:r.molt.chemical.physics@gmail.com" target="_blank">r.molt.chemical.physics@gmail.com</a>
IUPUI
</pre>
</div>
_______________________________________________<br>
users mailing list<br>
<a href="mailto:users@lists.quantum-espresso.org" target="_blank">users@lists.quantum-espresso.org</a><br>
<a href="https://lists.quantum-espresso.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.quantum-espresso.org/mailman/listinfo/users</a></blockquote></div>