[tor-talk] Trac accounts and potential account compromise

[Nusenu]

Karsten, thanks for taking the time to answer these questions.

> AFAIK, there's no way to find out whether an account has been
> compromised, other than asking users to log in and see if their password
> still works.

Ok, I thought that might be possible by looking into <auth
backend>/trac/apache logs to see if an existing account was registered
again (or more than once).

https://trac.torproject.org/projects/tor/ticket/11545#comment:3