2 May
2014
2 May
'14
3:45 a.m.
* Erinn Clark erinn@torproject.org [2014:05:01 22:41 -0400]:
Dear Tor Trac users,
We learned on recently that there was a bug in our Trac setup that allowed anyone to register a new user account for an existing user name, overwriting the existing user's password and thereby taking over the account [0].
I forgot the [0] :) Here it is: