[SAC] Mailman mbox access

Hi all,

As part of the update of the Nabble archives, and thanks to the
support of Eli Adam, the recently created archives at Nabble have a
full history of archives imported.

To provide the mbox files to Nabble admins for the import, Eli managed
to get an "special" url that every mailing list has for logged users
to download the full mbox file without having any admin privilege.

We just want to note here that those urls are accessible and we are
wondering if we should document or not the process publicly.

--
Jorge Sanz
http://es.osgeo.org

On Mon, Apr 30, 2012 at 7:34 PM, Jorge Gaspar Sanz Salinas
<jsanz@osgeo.org> wrote:

Hi all,

As part of the update of the Nabble archives, and thanks to the
support of Eli Adam, the recently created archives at Nabble have a
full history of archives imported.

To provide the mbox files to Nabble admins for the import, Eli managed
to get an "special" url that every mailing list has for logged users
to download the full mbox file without having any admin privilege.

We just want to note here that those urls are accessible and we are
wondering if we should document or not the process publicly.

While I am much friend of SAC procedures being documented, I am
not so sure on this one. It looks like an invitation to download 18k+
functional email address for whatever (bad) reasons...

Just my 0.02 euro cents,
Markus

On 30 April 2012 19:55, Markus Neteler <neteler@osgeo.org> wrote:

On Mon, Apr 30, 2012 at 7:34 PM, Jorge Gaspar Sanz Salinas
<jsanz@osgeo.org> wrote:

Hi all,

As part of the update of the Nabble archives, and thanks to the
support of Eli Adam, the recently created archives at Nabble have a
full history of archives imported.

To provide the mbox files to Nabble admins for the import, Eli managed
to get an "special" url that every mailing list has for logged users
to download the full mbox file without having any admin privilege.

We just want to note here that those urls are accessible and we are
wondering if we should document or not the process publicly.

While I am much friend of SAC procedures being documented, I am
not so sure on this one. It looks like an invitation to download 18k+
functional email address for whatever (bad) reasons...

Just my 0.02 euro cents,
Markus
_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

I in fact would prefer to disable this mailman feature, so new
requests for mboxes would pass through a Trac ticket.

At this time any mailman savvy spammer can get those addresses.

--
Jorge Sanz
http://es.osgeo.org