Re: [cobalt-developers] Neomail 1.25-3.pkg

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Jim Carey wrote:

> bugger - thought that was to TACO - better change passwords :-)

In general, Jim, I wouldn't even send passwords in a "private" email. 
There's no such thing as a private email, you know.

Yesterday, as part of a test in which we switched from secure (SSL)
administration of a RaQ (which has the unwanted side-effect of all the
other domains getting "bad cert" errors whenever administered through
siteadmin), to insecure administration through an SSH tunnel, I
inadvertently send the RaQ's admin password across the internet via http
protocol.

I realized it as I did it, and immediately logged in through SSH and
changed the root and admin passwords, then changed EVERY password on the
box.

Maybe I'm paranoid.  Maybe I'm just trying to stay secure.
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205