develooper Front page | perl.modules | Postings from November 2014

Re: leaked sensitive data in two versions of a module and need it removed

Thread Previous | Thread Next
From:
Olaf Alders
Date:
November 8, 2014 13:56
Subject:
Re: leaked sensitive data in two versions of a module and need it removed
Message ID:
211E5D51-73FF-4958-ABF9-9EA04728356A@gmail.com
Hi Lenz,

OK. Could you open an issue at https://github.com/CPAN-API/cpan-api/issues so that we can make sure this gets done?

Thanks,

Olaf

On Nov 7, 2014, at 5:39 AM, lenz <lenz@springtimesoft.com> wrote:

> hi olaf,
> 
> this seems to finally have worked, ask removed the files so could you please have a look at the metacpan side of things?
> 
> cheers
> lenz
> 
> sent from on the road
> 
>> On 18/10/2014, at 05:03, Olaf Alders <olaf.alders@gmail.com> wrote:
>> 
>> Hi Lenz,
>> 
>> We can remove the data from MetaCPAN once we know that it has been deleted from BackPAN.  If we do it before then, it'll just keep re-appearing anyway. ;)  If someone could confirm the file deletions once that has happened, we're happy to take care of this.
>> 
>> Best,
>> 
>> Olaf
>> 
>> 
>>> On Oct 16, 2014, at 5:08 PM, Lenz Gschwendtner <lenz@springtimesoft.com> wrote:
>>> 
>>> Hi,
>>> 
>>> We noticed that a module I authored a while back leaked data in two
>>> versions that are still on backpan and metacepan.
>>> 
>>> The BackPan URLs are:
>>> http://backpan.perl.org/authors/id/N/NO/NORBU/Giovanni-0.4.tar.gz
>>> http://backpan.perl.org/authors/id/N/NO/NORBU/Giovanni-0.3.tar.gz
>>> 
>>> The MetaCPAN URLs are:
>>> https://metacpan.org/source/NORBU/Mail-Chimp2-0.4
>>> https://metacpan.org/source/NORBU/Mail-Chimp2-0.3
>>> 
>>> I had cleaned up my pause account a while ago already and
>>> search.cpan.org is not showing the leaked files but metacpan does and so
>>> does backpan.
>>> 
>>> Please remove the two old versions of the module, not sure what is
>>> needed from me in terms of authentication to make the remove go forward,
>>> hopefully the missing versions in my pause account and on
>>> search.cpan.org are proove enough that NORBU is in fact me. Happy to
>>> deliver any other proove.
>>> 
>>> cheers
>>> Lenz (NORBU)
>>> -- 
>>> 
>>> Lenz Gschwendtner - startup punk
>>> PGP: 3133 DDED 2DB2 E61C 7EC8  15C7 32C6 6B3B FDD0 D423
>>> https://keybase.io/norbu09
>> 


Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About