search

andk / pause

Perl authors upload server
http://pause.perl.org/
150 stars 57 forks source link

No need to mention perlmonks anymore as the incident happened years ago #488

Open charsbar opened 3 months ago

ap commented 3 months ago

That text comes from cdb5e7cde1c19f799cd57d1404eeeaa4700f37c5, which was in 2009. So even the “recently“ you left is well out of date. I suggest changing the wording to this:

"User '$u' set to nologin. Your account may have been included in a precautionary password reset in the wake of a data breach incident at some other site. Please talk to modules\@perl.org to find out how to proceed"

rspier commented 2 months ago

I don't think we want this kind of thing to go to modules@ anymore, as it is public. Password change things are kind sensitive.

ap commented 2 months ago

@rspier What contact would you suggest sending people to instead?

rjbs commented 2 months ago

The PAUSE operating model says:

modules@perl.org is the public list. Any email sent to this address is forwarded to all of the PAUSE admins, and will appear in the public archive: http://www.nntp.perl.org/group/perl.modules/. Anyone can send email to this list. This is the official way to contact the PAUSE admins. Many of the admins are on IRC, but we prefer all requests go to the mail alias, so they're "on the record".

I don't have a strong feeling here, but I'd think we're okay sticking with that, then taking further communication private.