Worm leaked through

Werner Koch <[email protected]> Fri, 30 Jan 2004 20:50:27 +0100

Newsgroups	gmane.comp.encryption.gpg.announce
Message-ID	<[email protected]>

Hi!

As you might all have guessed, the recent worm mail used a faked From
address which happens to be allowed to post to gnupg announce.

Given that those worms are getting smarter and smarter in selecting
address combination, we will have to implement stronger authentication
checks to Mailman.

Sorry for the trouble

  Werner

-- 
Werner Koch                                      <[email protected]>
The GnuPG Experts                                http://g10code.com
Free Software Foundation Europe                  http://fsfeurope.org