Ben himself received 500 of these emails:
http://irclog.iq.harvard.edu/dataverse/2015-07-15#i_21683 :(
This incident has made me question the very existence of this list.
Ben and I are seriously considering shutting it down, at least in its
current form.
We just kicked off a second day of deciding what to do:
http://irclog.iq.harvard.edu/dataverse/2015-07-16
I think we should shut this list down in its current form (hosted on
Harvard's installation of Mailman) for the following reasons:
1. It has "dvn" in the name but we've renamed the software to
"Dataverse". "DVN" is a legacy term that refers to the 3.x version of
the software before the 4.x rewrite
2. The ridiculous number of "unsubscribe me" emails we've gotten. We
let the attackers win. Fine. I don't have any control over the Mailman
installation anyway. There's not much I can do personally.
Furthermore, I think we should seriously consider *not* setting up a
separate list (such as on Google Groups) for the following reasons:
- We could use the main Google Group at
https://groups.google.com/forum/#!forum/dataverse-community instead
because it's low traffic and a lot of what we talk about here would
probably be of interest to the whole Dataverse community. Now that
Shibboleth support has shipped (though flagged as experimental in 4.0)
it is certainly on topic to ask questions about setting it up, how the
feature works, bugs, what else is planned, etc.
- Now that we have moved from Redmine to GitHub issues it is *much*
easier for the community to participate in public discussion of all
features (not just auth) by leaving comments at
https://github.com/IQSS/dataverse/issues
I'm probably forgetting something but I hope this helps. I appreciate
the feedback I've gotten on this list! Any thoughts on all this are
quite welcome! Please feel free to jump in at
http://chat.dataverse.org as well!
Phil
p.s. I'm also the coordinator of the API Community Group and I have no
plans to set up a separate mailing list:
http://community.dataverse.org/community-groups/api.html
On Wed, Jul 15, 2015 at 3:47 AM, Ben Companjen
<ben.companjen(a)dans.knaw.nl> wrote:
Dear all,
Last night (CEST) dvn-auth list subscribers (may) have received "confirm
unsubscribe" and/or "mailing list reminder" messages. Chances are you did
not want to unsubscribe, so you can ignore the messages.
Phil and I are investigating what happened (although we have to rely on the
list system administrators) and if this should/could be prevented in the
future.
Ben
_______________________________________________
dvn-auth mailing list
dvn-auth(a)lists.iq.harvard.edu
To unsubscribe from this list or get other information:
https://lists.iq.harvard.edu/mailman/listinfo/dvn-auth
--
Philip Durbin
Software Developer for
http://dataverse.org
http://www.iq.harvard.edu/people/philip-durbin