<div dir="ltr"><div><br></div><div>The real issue is... why does the system even have access to plaintext passwords? generating such a report should be impossible. </div><div><br></div><div>reported to <a href="mailto:mailman@kde.org">mailman@kde.org</a></div><div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Mar 2, 2023 at 7:00 AM <<a href="mailto:digikam-users-request@kde.org">digikam-users-request@kde.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send Digikam-users mailing list submissions to<br>
<a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://mail.kde.org/mailman/listinfo/digikam-users" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/listinfo/digikam-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:digikam-users-request@kde.org" target="_blank">digikam-users-request@kde.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:digikam-users-owner@kde.org" target="_blank">digikam-users-owner@kde.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Digikam-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Security ? (Gilles Caulier)<br>
2. Re: Re-written digiKam Online User Manual is Complete...<br>
(Gilles Caulier)<br>
3. Re: Security ? (Maik Qualmann)<br>
4. Re: Security ? (Brian Morrison)<br>
5. Re: Security ? (Remco Viëtor)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Thu, 2 Mar 2023 07:26:11 +0100<br>
From: Gilles Caulier <<a href="mailto:caulier.gilles@gmail.com" target="_blank">caulier.gilles@gmail.com</a>><br>
To: "<a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a>" <<a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a>><br>
Subject: Re: [digiKam-users] Security ?<br>
Message-ID:<br>
<CAHFG6sF9swj9SJazgsYHKR7vCeGg=<a href="mailto:MsH_VUVVVZufOWm9rJsMQ@mail.gmail.com" target="_blank">MsH_VUVVVZufOWm9rJsMQ@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="UTF-8"<br>
<br>
Hi,<br>
<br>
The mail server hosted in KDE infrastructure have been upgraded few<br>
weeks ago by KDE admin. It sound like a configuration problem or<br>
something like that. I recommend to report this problem to the KDE<br>
admin team.<br>
<br>
Note : we are (digiKam team) not responsible of mail server<br>
administration. The project use as well the infrastructure<br>
functionalities.<br>
<br>
Best regards<br>
<br>
Gilles Caulier<br>
<br>
Le jeu. 2 mars 2023 à 06:28, Herman Callens<br>
<<a href="mailto:herman.callens@outlook.be" target="_blank">herman.callens@outlook.be</a>> a écrit :<br>
><br>
> I got this mail today (see below signature) to remind me about my mailing list membership.<br>
><br>
><br>
><br>
> I am very worried about the fact that my password is included in this mail. This means that there is a real technological and organisational security-problem in you mailing-system en organisation.<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
> Herman Callens<br>
><br>
> Welvaartstraat 77<br>
><br>
> 2530 Boechout<br>
><br>
><br>
><br>
> M. <a href="mailto:herman.callens@outlook.be" target="_blank">herman.callens@outlook.be</a><br>
><br>
> G. +32 (0)478 99 99 92<br>
><br>
><br>
><br>
><br>
><br>
> This is a reminder, sent out once a month, about your <a href="http://kde.org" rel="noreferrer" target="_blank">kde.org</a> mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list.<br>
><br>
><br>
><br>
> You can visit the URLs to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<br>
><br>
><br>
><br>
> In addition to the URL interfaces, you can also use email to make such changes. For more info, send a message to the '-request' address of the list (for example, <a href="mailto:mailman-request@kde.org" target="_blank">mailman-request@kde.org</a>) containing just the word 'help' in the message body, and an email message will be sent to you with instructions.<br>
><br>
><br>
><br>
> If you have questions, problems, comments, etc, send them to <a href="mailto:mailman-owner@kde.org" target="_blank">mailman-owner@kde.org</a>. Thanks!<br>
><br>
><br>
><br>
> Passwords for <a href="mailto:callens.herman@telenet.be" target="_blank">callens.herman@telenet.be</a>:<br>
><br>
><br>
><br>
> List Password // URL<br>
><br>
> ---- --------<br>
><br>
> <a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a> xxxxxxxxxxxxxxxxxx<br>
><br>
> <a href="https://mail.kde.org/mailman/options/digikam-users/callens.herman%40telenet.be" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/options/digikam-users/callens.herman%40telenet.be</a><br>
><br>
><br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Thu, 2 Mar 2023 07:32:44 +0100<br>
From: Gilles Caulier <<a href="mailto:caulier.gilles@gmail.com" target="_blank">caulier.gilles@gmail.com</a>><br>
To: digiKam - Home Manage your photographs as a professional with the<br>
power of open source <<a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a>><br>
Subject: Re: [digiKam-users] Re-written digiKam Online User Manual is<br>
Complete...<br>
Message-ID:<br>
<<a href="mailto:CAHFG6sFcvxLdAGb%2BDthEH3o_0QJ0CTnwE1rFufiQtjkQVPm0gw@mail.gmail.com" target="_blank">CAHFG6sFcvxLdAGb+DthEH3o_0QJ0CTnwE1rFufiQtjkQVPm0gw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="UTF-8"<br>
<br>
Hi all,<br>
<br>
In fact, the French internationalization of the online documentation<br>
does not contain yet any translations. Sounds like nobody works on it,<br>
even if files are prepared and ready to be translated.<br>
<br>
Look the translation stats by team in this page :<br>
<br>
<a href="https://l10n.kde.org/stats/gui/trunk-kf5/package/digikam-doc/" rel="noreferrer" target="_blank">https://l10n.kde.org/stats/gui/trunk-kf5/package/digikam-doc/</a><br>
<br>
In other words, if you want to contribute to digiKam without having to<br>
code anything, it's time to help with translation from English to your<br>
native language. All is explained in this README file :<br>
<br>
<a href="https://invent.kde.org/documentation/digikam-doc/-/blob/master/README.md" rel="noreferrer" target="_blank">https://invent.kde.org/documentation/digikam-doc/-/blob/master/README.md</a><br>
<br>
... see ""Translations" section for details.<br>
<br>
Best regards<br>
<br>
Gilles Caulier<br>
<br>
Le mar. 28 févr. 2023 à 16:20, Gilles Caulier<br>
<<a href="mailto:caulier.gilles@gmail.com" target="_blank">caulier.gilles@gmail.com</a>> a écrit :<br>
><br>
> The French translation is so far not yet competed. Untranslated strings still in English…<br>
><br>
> Gilles<br>
><br>
> Le mar. 28 févr. 2023 à 15:54, Jean-Pierre Boucher <<a href="mailto:jp.boucher1@gmail.com" target="_blank">jp.boucher1@gmail.com</a>> a écrit :<br>
>><br>
>> Hello Gilles,<br>
>> this is great news, I am pleasantly surprised by this great success. There are certainly still a few fine-tunings, but compared to the whole process, it's really nothing. In fact I just tried to switch to the French version but it doesn't seem to work (I'm staying in the English version) on the other hand the Italian, Spanish and Portuguese versions seem to work...I guess it's normal you have to move forward on all sides, I see that everything is moving at high speed. Congratulations to you and to all the teams who contributed to all this. This will be a big plus point for digiKam. Congratulations Jean-Pierre<br>
>><br>
>> Le lun. 27 févr. 2023 à 16:47, Gilles Caulier <<a href="mailto:caulier.gilles@gmail.com" target="_blank">caulier.gilles@gmail.com</a>> a écrit :<br>
>>><br>
>>> Hi all,<br>
>>><br>
>>> After 3 long months of re-writing, the online digiKam manual is ready<br>
>>> to use for all users... It's also available as an e-pub and translated<br>
>>> in different languages. Plenty of missing sections have been added<br>
>>> compared to the original handbook.<br>
>>><br>
>>> <a href="https://docs.digikam.org/en/" rel="noreferrer" target="_blank">https://docs.digikam.org/en/</a><br>
>>><br>
>>> Have fun reading this manual.<br>
>>><br>
>>> Best regards<br>
>>><br>
>>> Gilles Caulier<br>
><br>
> --<br>
> Send with Gmail Mobile<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Thu, 02 Mar 2023 12:39:15 +0100<br>
From: Maik Qualmann <<a href="mailto:metzpinguin@gmail.com" target="_blank">metzpinguin@gmail.com</a>><br>
To: <a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a><br>
Subject: Re: [digiKam-users] Security ?<br>
Message-ID: <2669966.mvXUDI8C0e@linux-tpgn><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
@Gilles, don't you get this mail? It's a reminder email, I've been getting it <br>
every month for many years. Possibly configurable in the mail interface? I'll <br>
take a look tonight. But I also think that it is not a security problem, since <br>
more than logging in/out of the mail system is not possible.<br>
<br>
Maik<br>
<br>
Am Donnerstag, 2. März 2023, 07:26:11 CET schrieb Gilles Caulier:<br>
> Hi,<br>
> <br>
> The mail server hosted in KDE infrastructure have been upgraded few<br>
> weeks ago by KDE admin. It sound like a configuration problem or<br>
> something like that. I recommend to report this problem to the KDE<br>
> admin team.<br>
> <br>
> Note : we are (digiKam team) not responsible of mail server<br>
> administration. The project use as well the infrastructure<br>
> functionalities.<br>
> <br>
> Best regards<br>
> <br>
> Gilles Caulier<br>
> <br>
> Le jeu. 2 mars 2023 à 06:28, Herman Callens<br>
> <br>
> <<a href="mailto:herman.callens@outlook.be" target="_blank">herman.callens@outlook.be</a>> a écrit :<br>
> > I got this mail today (see below signature) to remind me about my mailing<br>
> > list membership.<br>
> > <br>
> > <br>
> > <br>
> > I am very worried about the fact that my password is included in this<br>
> > mail. This means that there is a real technological and organisational<br>
> > security-problem in you mailing-system en organisation.<br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > Herman Callens<br>
> > <br>
> > Welvaartstraat 77<br>
> > <br>
> > 2530 Boechout<br>
> > <br>
> > <br>
> > <br>
> > M. <a href="mailto:herman.callens@outlook.be" target="_blank">herman.callens@outlook.be</a><br>
> > <br>
> > G. +32 (0)478 99 99 92<br>
> > <br>
> > <br>
> > <br>
> > <br>
> > <br>
> > This is a reminder, sent out once a month, about your <a href="http://kde.org" rel="noreferrer" target="_blank">kde.org</a> mailing list<br>
> > memberships. It includes your subscription info and how to use it to<br>
> > change it or unsubscribe from a list.<br>
> > <br>
> > <br>
> > <br>
> > You can visit the URLs to change your membership status or configuration,<br>
> > including unsubscribing, setting digest-style delivery or disabling<br>
> > delivery altogether (e.g., for a vacation), and so on.<br>
> > <br>
> > <br>
> > <br>
> > In addition to the URL interfaces, you can also use email to make such<br>
> > changes. For more info, send a message to the '-request' address of the<br>
> > list (for example, <a href="mailto:mailman-request@kde.org" target="_blank">mailman-request@kde.org</a>) containing just the word<br>
> > 'help' in the message body, and an email message will be sent to you with<br>
> > instructions.<br>
> > <br>
> > <br>
> > <br>
> > If you have questions, problems, comments, etc, send them to<br>
> > <a href="mailto:mailman-owner@kde.org" target="_blank">mailman-owner@kde.org</a>. Thanks!<br>
> > <br>
> > <br>
> > <br>
> > Passwords for <a href="mailto:callens.herman@telenet.be" target="_blank">callens.herman@telenet.be</a>:<br>
> > <br>
> > <br>
> > <br>
> > List Password // URL<br>
> > <br>
> > ---- --------<br>
> > <br>
> > <a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a> xxxxxxxxxxxxxxxxxx<br>
> > <br>
> > <a href="https://mail.kde.org/mailman/options/digikam-users/callens.herman%40telene" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/options/digikam-users/callens.herman%40telene</a><br>
> > <a href="http://t.be" rel="noreferrer" target="_blank">t.be</a><br>
<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Thu, 2 Mar 2023 11:44:11 +0000<br>
From: Brian Morrison <<a href="mailto:bdm@fenrir.org.uk" target="_blank">bdm@fenrir.org.uk</a>><br>
To: <a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a><br>
Subject: Re: [digiKam-users] Security ?<br>
Message-ID: <<a href="mailto:20230302114411.7e2edb49@deangelis.fenrir.org.uk" target="_blank">20230302114411.7e2edb49@deangelis.fenrir.org.uk</a>><br>
Content-Type: text/plain; charset=US-ASCII<br>
<br>
On Thu, 02 Mar 2023 12:39:15 +0100<br>
Maik Qualmann <<a href="mailto:metzpinguin@gmail.com" target="_blank">metzpinguin@gmail.com</a>> wrote:<br>
<br>
> But I also think that it is not a security problem<br>
<br>
People do re-use passwords, that can open up potential attacks on other<br>
accounts linked by email address.<br>
<br>
-- <br>
<br>
Brian Morrison<br>
<br>
"I am not young enough to know everything"<br>
Oscar Wilde<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Thu, 02 Mar 2023 12:46:29 +0100<br>
From: Remco Viëtor <<a href="mailto:remco.vietor@wanadoo.fr" target="_blank">remco.vietor@wanadoo.fr</a>><br>
To: <a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a><br>
Subject: Re: [digiKam-users] Security ?<br>
Message-ID: <3547026.R56niFO833@manticore><br>
Content-Type: text/plain; charset="UTF-8"<br>
<br>
On jeudi 2 mars 2023 12:39:15 CET Maik Qualmann wrote:<br>
> @Gilles, don't you get this mail? It's a reminder email, I've been getting<br>
> it every month for many years. Possibly configurable in the mail interface?<br>
> I'll take a look tonight. But I also think that it is not a security<br>
> problem, since more than logging in/out of the mail system is not possible.<br>
> <br>
> Maik<br>
> <br>
> Am Donnerstag, 2. März 2023, 07:26:11 CET schrieb Gilles Caulier:<br>
> > Hi,<br>
> > <br>
> > The mail server hosted in KDE infrastructure have been upgraded few<br>
> > weeks ago by KDE admin. It sound like a configuration problem or<br>
> > something like that. I recommend to report this problem to the KDE<br>
> > admin team.<br>
> > <br>
> > Note : we are (digiKam team) not responsible of mail server<br>
> > administration. The project use as well the infrastructure<br>
> > functionalities.<br>
> > <br>
> > Best regards<br>
> > <br>
> > Gilles Caulier<br>
> > <br>
> > Le jeu. 2 mars 2023 à 06:28, Herman Callens<br>
> > <br>
> > <<a href="mailto:herman.callens@outlook.be" target="_blank">herman.callens@outlook.be</a>> a écrit :<br>
> > > I got this mail today (see below signature) to remind me about my<br>
> > > mailing<br>
> > > list membership.<br>
> > > <br>
> > > <br>
> > > <br>
> > > I am very worried about the fact that my password is included in this<br>
> > > mail. This means that there is a real technological and organisational<br>
> > > security-problem in you mailing-system en organisation.<br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > Herman Callens<br>
> > > <br>
> > > Welvaartstraat 77<br>
> > > <br>
> > > 2530 Boechout<br>
> > > <br>
> > > <br>
> > > <br>
> > > M. <a href="mailto:herman.callens@outlook.be" target="_blank">herman.callens@outlook.be</a><br>
> > > <br>
> > > G. +32 (0)478 99 99 92<br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > <br>
> > > This is a reminder, sent out once a month, about your <a href="http://kde.org" rel="noreferrer" target="_blank">kde.org</a> mailing<br>
> > > list<br>
> > > memberships. It includes your subscription info and how to use it to<br>
> > > change it or unsubscribe from a list.<br>
> > > <br>
> > > <br>
> > > <br>
> > > You can visit the URLs to change your membership status or<br>
> > > configuration,<br>
> > > including unsubscribing, setting digest-style delivery or disabling<br>
> > > delivery altogether (e.g., for a vacation), and so on.<br>
> > > <br>
> > > <br>
> > > <br>
> > > In addition to the URL interfaces, you can also use email to make such<br>
> > > changes. For more info, send a message to the '-request' address of the<br>
> > > list (for example, <a href="mailto:mailman-request@kde.org" target="_blank">mailman-request@kde.org</a>) containing just the word<br>
> > > 'help' in the message body, and an email message will be sent to you<br>
> > > with<br>
> > > instructions.<br>
> > > <br>
> > > <br>
> > > <br>
> > > If you have questions, problems, comments, etc, send them to<br>
> > > <a href="mailto:mailman-owner@kde.org" target="_blank">mailman-owner@kde.org</a>. Thanks!<br>
> > > <br>
> > > <br>
> > > <br>
> > > Passwords for <a href="mailto:callens.herman@telenet.be" target="_blank">callens.herman@telenet.be</a>:<br>
> > > <br>
> > > <br>
> > > <br>
> > > List Password // URL<br>
> > > <br>
> > > ---- --------<br>
> > > <br>
> > > <a href="mailto:digikam-users@kde.org" target="_blank">digikam-users@kde.org</a> xxxxxxxxxxxxxxxxxx<br>
> > > <br>
> > > <a href="https://mail.kde.org/mailman/options/digikam-users/callens.herman%40tele" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/options/digikam-users/callens.herman%40tele</a><br>
> > > ne<br>
> > > <a href="http://t.be" rel="noreferrer" target="_blank">t.be</a><br>
Also, I can't remember defining a password for web access, as I never <br>
connected to that site... Registering for the mailing list was done through <br>
email.<br>
<br>
So, how can you make sure that someone connecting to the website has access to <br>
the email address, other than sending them the password by email?<br>
<br>
Remco<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Digikam-users mailing list<br>
<a href="mailto:Digikam-users@kde.org" target="_blank">Digikam-users@kde.org</a><br>
<a href="https://mail.kde.org/mailman/listinfo/digikam-users" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/listinfo/digikam-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Digikam-users Digest, Vol 214, Issue 5<br>
*********************************************<br>
</blockquote></div></div>