Mailinglist Archive: opensuse-security (196 mails)

[suse@xxxxxxxxxxxx]

Hi all!

If the mailing list is going to be altered, why can't we
have a randomly generated *graphical* password displayed on
the subscription page, that needs to be read by a real
person, and then typed into a password box, to confirm
subscription to the list.

This is another way of stopping bots from subscribing to a
list, as they obviously cannot read the graphical password,
and type it into a password box!

just my 2 cents

HTH - Keith Roberts

http://www.karsites.net/

On Sun, 24 Oct 2004, Mathias Homann wrote:

> best idea would be:
>
> 1. change the way the list is managed, so that a simple reply to a
> mail does NOT confirm a subscription. Generate some dynamical link
> instead that the user has to follow or something like that. That way,
> nobody can just subscribe some weird autoreplying bots to the list
> via the web frontend.