[Savannah-hackers] Re: In reply to savannah.gnu.org Verification

[Mathieu Roy]

devel <address@hidden> said:

> I did not request this password change !
> 
> Regards,
> Santosh Dawara
> 
> Someone (presumably you) on the savannah.gnu.org site requested a
> password change through email verification. If this was not you,
> this could pose a security risk for the system.
> 
> The request came from 61.11.48.115
> (IP: 61.11.48.115 port: 4090)
> with Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)
> 
> If you requested this verification, visit the same URL
> to change your password:
> 
> https://savannah.gnu.org/account/lostlogin.php?confirm_hash=4344cdef20f413462a05133427b7c16e
> 
> If you did not request this verification, please visit this URL to report 
> about
> it to address@hidden
> 

We should modify this sentence to clearly state that they mustn't
publish this url in a public area.

I manually deleted the hash from the database.

-- 
Mathieu Roy
 
 << Profile  << http://savannah.gnu.org/users/yeupou <<
 >> Homepage >> http://yeupou.coleumes.org           >>
 << GPG Key  << http://stock.coleumes.org/gpg        <<