[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Trac accounts and potential account compromise



* Erinn Clark <erinn@xxxxxxxxxxxxxx> [2014:05:01 22:41 -0400]: 
> Dear Tor Trac users,
> 
> We learned on recently that there was a bug in our Trac setup that allowed
> anyone to register a new user account for an existing user name, overwriting
> the existing user's password and thereby taking over the account [0].

I forgot the [0] :) Here it is:

https://trac.torproject.org/projects/tor/ticket/11545

Attachment: signature.asc
Description: Digital signature

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk