• BBBS echo security (fixed?)

    From g00r00@21:1/108 to All on Friday, June 16, 2017 18:51:40
    Okay so I did more experimentation and I may have a band-aid.

    I am almost certain my original hypothesis is true and that BBBS is indeed checking the actual message addresses (even though FTS-0001 says it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    --- Mystic BBS v1.12 A34 (Windows/32)
    * Origin: Sector 7 [Mystic BBS WHQ] (21:1/108)
  • From g00r00@21:1/108 to g00r00 on Friday, June 16, 2017 19:01:53
    Okay so I did more experimentation and I may have a band-aid.

    I am almost certain my original hypothesis is true and that BBBS is
    indeed checking the actual message addresses (even though FTS-0001 says
    it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    Also a Linux 64-bit version is now available at:

    http://www.mysticbbs.com/downloads/mutil_l64.rar

    --- Mystic BBS v1.12 A34 (Windows/32)
    * Origin: Sector 7 [Mystic BBS WHQ] (21:1/108)
  • From Nugax@21:1/107 to All on Friday, June 16, 2017 18:44:16
    Your the man. Let me know when you get a Linux/64 version!

    On 12:51 16/06 , g00r00 wrote:
    Okay so I did more experimentation and I may have a band-aid.

    I am almost certain my original hypothesis is true and that BBBS is indeed >checking the actual message addresses (even though FTS-0001 says it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I >hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    --- Mystic BBS v1.12 A34 (Windows/32)
    * Origin: Sector 7 [Mystic BBS WHQ] (21:1/108)


    --
    yrNews Usenet Reader for iOS
    http://appstore.com/yrNewsUsenetReader

    --- Mystic BBS/NNTP v1.12 A33 (Linux/64)
    * Origin: -=The ByteXchange BBS : bbs.thebytexchange.com=- (21:1/107)
  • From Nugax@21:1/107 to All on Friday, June 16, 2017 18:47:13
    g00r00,

    Sent you an email to gmail with the email janis uses to contact bbbs author Kim.

    Thanks

    On 12:51 16/06 , g00r00 wrote:
    Okay so I did more experimentation and I may have a band-aid.

    I am almost certain my original hypothesis is true and that BBBS is indeed >checking the actual message addresses (even though FTS-0001 says it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I >hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    --- Mystic BBS v1.12 A34 (Windows/32)
    * Origin: Sector 7 [Mystic BBS WHQ] (21:1/108)


    --
    yrNews Usenet Reader for iOS
    http://appstore.com/yrNewsUsenetReader

    --- Mystic BBS/NNTP v1.12 A33 (Linux/64)
    * Origin: -=The ByteXchange BBS : bbs.thebytexchange.com=- (21:1/107)
  • From Nugax@21:1/107 to All on Friday, June 16, 2017 18:49:00
    Thanks!

    On 13:01 16/06 , g00r00 wrote:
    Okay so I did more experimentation and I may have a band-aid.

    I am almost certain my original hypothesis is true and that BBBS is indeed checking the actual message addresses (even though FTS-0001 says it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    Also a Linux 64-bit version is now available at:

    http://www.mysticbbs.com/downloads/mutil_l64.rar

    --- Mystic BBS v1.12 A34 (Windows/32)
    * Origin: Sector 7 [Mystic BBS WHQ] (21:1/108)


    --
    yrNews Usenet Reader for iOS
    http://appstore.com/yrNewsUsenetReader

    --- Mystic BBS/NNTP v1.12 A33 (Linux/64)
    * Origin: -=The ByteXchange BBS : bbs.thebytexchange.com=- (21:1/107)
  • From Nugax@21:1/107 to All on Friday, June 16, 2017 19:05:45
    I just sent a test message on Fido test echo test new mutil

    On 13:01 16/06 , g00r00 wrote:
    Okay so I did more experimentation and I may have a band-aid.

    I am almost certain my original hypothesis is true and that BBBS is indeed checking the actual message addresses (even though FTS-0001 says it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    Also a Linux 64-bit version is now available at:

    http://www.mysticbbs.com/downloads/mutil_l64.rar

    --- Mystic BBS v1.12 A34 (Windows/32)
    * Origin: Sector 7 [Mystic BBS WHQ] (21:1/108)


    --
    yrNews Usenet Reader for iOS
    http://appstore.com/yrNewsUsenetReader

    --- Mystic BBS/NNTP v1.12 A33 (Linux/64)
    * Origin: -=The ByteXchange BBS : bbs.thebytexchange.com=- (21:1/107)
  • From Avon@21:1/101 to g00r00 on Wednesday, June 21, 2017 19:09:45
    On 06/16/17, g00r00 pondered and said...

    I am almost certain my original hypothesis is true and that BBBS is
    indeed checking the actual message addresses (even though FTS-0001 says
    it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    Have applied this at 21:1/100 to see how we get on. Jeff, let me know :)

    --- Mystic BBS v1.12 A33 (Windows/32)
    * Origin: Agency BBS | telnet://agency.bbs.geek.nz (21:1/101)
  • From Nugax@21:1/107 to All on Wednesday, June 21, 2017 08:58:15
    I have it working and works great no issues.

    On 14:09 21/06 , Avon wrote:
    On 06/16/17, g00r00 pondered and said...

    I am almost certain my original hypothesis is true and that BBBS is indeed checking the actual message addresses (even though FTS-0001 says it should not)

    I made a Win32 version of MUTIL with the potential "band-aid" for BBBS that I hope someone will test:

    http://www.mysticbbs.com/downloads/mutil.rar

    Have applied this at 21:1/100 to see how we get on. Jeff, let me know :)

    --- Mystic BBS v1.12 A33 (Windows/32)
    * Origin: Agency BBS | telnet://agency.bbs.geek.nz (21:1/101)


    --
    yrNews Usenet Reader for iOS
    http://appstore.com/yrNewsUsenetReader

    --- Mystic BBS/NNTP v1.12 A33 (Linux/64)
    * Origin: -=The ByteXchange BBS : bbs.thebytexchange.com=- (21:1/107)