https://bugzilla.wikimedia.org/show_bug.cgi?id=19010


Happy-melon <happy-me...@live.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |happy-me...@live.com




--- Comment #1 from Happy-melon <happy-me...@live.com>  2009-05-31 11:34:50 UTC 
---
I'm sure this is a dupe. Regardless, it's not a significant attack vector
against admin accounts, because the home wiki, which has control of the global
account, is decided mainly dependent on local userrights. So the admin account
on iiwiki will ensure that iiwiki is the home-wiki for User:nnn's global
account.  So it will not be possible to unify the account on another project
except by gaining *higher* permissions on that project.  At which point, we
have a malicious admin account on xxwiki *anyway*, making the issue rather
moot.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to