[nafex] NAFEX security

Steve sdw12986 at aol.com
Mon Dec 3 01:12:43 EST 2012


Wow, you found it on a Google search? I should try to duplicate that on 
myself.
I'm not too worried though. The password I use here is used nowhere 
else. My password for Facebook is similar but bank accounts and mail 
passwords are 100% different.


On 12/1/2012 1:13 PM, Elizabeth Hilborn wrote:
> I totally agree Al. I believe that this practice is the source of seeing
> my NAFEX password at the time associated with my name publicly in a
> Google search a couple of years ago. Very sobering experience!
>
> On 12/1/2012 12:20 PM, Alan Yelvington wrote:
>> Hello all,
>>
>> I actually READ the monthly update that
>> ibiblio.org sends out each month about the
>> list, and I was unpleasantly surprised to see
>> that the email includes both my email address
>> and password.
>>
>> I have professional experience in I.T.
>> security, and this is a very old behavior
>> that is considered a worst-practice by
>> today's standards.
>>
>> _I strongly recommend that all of you create
>> a password that you use exclusively for
>> ibiblio.org lists until they change their
>> practice._
>>
>> Very bad (and very smart) people sit on the
>> Internet and harvest these kinds of emails,
>> and it's not at all difficult to grab the
>> entire batch in one swoop and harvest all of
>> the email accounts and passwords.
>>
>> _How many of you have one password for
>> everything?_  I thought so...
>>
>> The bottom line is that the bad guys can
>> search for matches with vendors, and try out
>> your NAFEX password to buy on your behalf.
>> That, or they hijack your email account and
>> use it to spam your friends.
>>
>> It's that simple.
>>
>> No sense having a complicated password when
>> ibiblio.org emails it to the world.
>>
>> I could go on about how it's also bad that
>> ibiblio.org actually has access to your
>> password, but why belabor the point...
>>
>> _Anyway, change your password to something
>> unique to NAFEX unless you're a risk taker_.
>>
>> Al Yelvington
>> Russell, PA
>>
>
> __________________
> nafex mailing list
> nafex at lists.ibiblio.org
> aubscribe/unsubscribe|user config|list info:
> http://lists.ibiblio.org/mailman/listinfo/nafex
> message archives
> http://lists.ibiblio.org/pipermail/nafex
> Google message archive search:
> site: lists.ibiblio.org/pipermail/nafex [searchstring]
> nafex list mirror sites:
> http://nafexlist.blogspot.com/
> http://groups.google.com/group/nafexlist
> https://sites.google.com/site/nafexmailinglist
> Avant Geared  http://www.avantgeared.com


More information about the nafex mailing list