[sword-devel] Mailing list archives are insecure!

[DM Smith]

David, Troy explained it. You can have any prefix you like and the CrossWire web server will try to serve it as if there were none if it doesn’t match a known list of services.
diddly-squat.crosswire.org/pipermail/sword-devel <http://diddly-squat.crosswire.org/pipermail/sword-devel>

That Leo’s hallucination satisfied the implementation of the web server is just dumb luck.

DM

> On May 2, 2025, at 10:54 AM, David Haslam <dfhdfh at protonmail.com> wrote:
> 
> That doesn’t explain why the URL worked perfectly well and gave access to this very list. 
> 
> Explain that if you can. 
> 
> No LSD is required. 
> 
> David
> 
> Sent from Proton Mail <https://proton.me/mail/home> for iOS
> 
> 
> On Fri, May 2, 2025 at 15:18, DM Smith <dmsmith at crosswire.org <mailto:On Fri, May 2, 2025 at 15:18, DM Smith <<a href=>> wrote:
>> 
>> Leo is hallucinating. This is a well known problem of GPT agents.
>> 
>>> On May 2, 2025, at 8:13 AM, David Haslam <dfhdfh at protonmail.com> wrote:
>>> 
>>> Hi Troy, 
>>> 
>>> That's a curious question! 
>>> 
>>> Me:  What is pipermail?
>>> 
>>> Leo:  Based on the search results, **pipermail** appears to be a term related to electronic mailing lists, specifically the archives of mailing lists managed by the GNU Mailman software.
>>> 
>>> According to Wikipedia, GNU Mailman is a computer software application for managing electronic mailing lists, and pipermail is likely a part of this system. It seems that pipermail is used to access and browse the archives of mailing lists.
>>> 
>>> If you're looking for more information on pipermail, I can try to help you further. 
>>> 
>>> Me:   What is the URL for the archive of the CrossWire Bible Society's mailing list called sword-devel ? Leo: The URL for the archive of the CrossWire Bible Society's mailing list called sword-devel is not explicitly mentioned in the search results you provided. However, based on the context, it appears to be related to email list archives or mailing list management systems.
>>>      
>>> 
>>>       
>>> 
>>>      
>>> 
>>>      
>>> 
>>>       From the search results, it seems that the `pipermail` term is related to email list archives, specifically the archives of mailing lists managed by the GNU Mailman software. 
>>>      
>>> 
>>>      
>>> 
>>>       
>>> 
>>>      
>>> Given this information, it is possible that the URL for the archive of the CrossWire Bible Society's mailing list called sword-devel is in the format of `https://lists.crosswire.org/pipermail/sword-devel/` or something similar.
>>> 
>>> Aside: Leo is the AI agent in the Brave browser. 
>>> 
>>> So, now you know how I found it, is there something amiss with the aforementioned hostname? 
>>> I don't recall seeing it before, but, hey!
>>> 
>>> Best regards, 
>>> 
>>> David
>>> 
>>> Sent with Proton Mail <https://pr.tn/ref/SWXT9A5YZ67G> secure email.
>>> 
>>> On Friday, May 2nd, 2025 at 1:03 PM, Troy A. Griffitts <scribe at crosswire.org> wrote:
>>>> Don't use 'lists' dot crosswire.org. Where did you find that hostname? We have a catchall, so you can say https://bettyboop.crosswire.org <https://bettyboop.crosswire.org/> if you want, but the certificate won't be value for that domain.
>>>> 
>>>> On 5/2/25 6:46 AM, David Haslam wrote:
>>>>> If you visit (eg) https://lists.crosswire.org/pipermail/sword-devel/
>>>>> 
>>>>> The first thing you notice is a Browser Warning that the URL is insecure. 
>>>>> The https connection falls back to insecure http 
>>>>> 
>>>>> Please would someone with access to our server make the necessary changes for our list archives. 
>>>>> 
>>>>> 
>>>>> Best regards, 
>>>>> 
>>>>> David
>>>>> 
>>>>> Sent with Proton Mail <https://pr.tn/ref/SWXT9A5YZ67G> secure email.
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> sword-devel mailing list: sword-devel at crosswire.org <mailto:sword-devel at crosswire.org>
>>>>> http://crosswire.org/mailman/listinfo/sword-devel
>>>>> Instructions to unsubscribe/change your settings at above page
>>> 
>>> _______________________________________________ 
>>> sword-devel mailing list: sword-devel at crosswire.org 
>>> http://crosswire.org/mailman/listinfo/sword-devel 
>>> Instructions to unsubscribe/change your settings at above page
>> 
> _______________________________________________
> sword-devel mailing list: sword-devel at crosswire.org
> http://crosswire.org/mailman/listinfo/sword-devel
> Instructions to unsubscribe/change your settings at above page

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://crosswire.org/pipermail/sword-devel/attachments/20250502/465e3898/attachment-0001.htm>