* Erinn Clark <erinn@xxxxxxxxxxxxxx> [2014:05:01 22:41 -0400]: > Dear Tor Trac users, > > We learned on recently that there was a bug in our Trac setup that allowed > anyone to register a new user account for an existing user name, overwriting > the existing user's password and thereby taking over the account [0]. I forgot the [0] :) Here it is: https://trac.torproject.org/projects/tor/ticket/11545
Attachment:
signature.asc
Description: Digital signature
_______________________________________________ tor-dev mailing list tor-dev@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev