>howWhy not run is as its own user?
there's still a possible security threat... consider if someone figures out
Why not run is as its own user?
there's still a possible security threat... consider if someone
figures out how to get to the command prompt and then shovels a priv
escalation hack which gives them root privs? they have the whole
machine... do that in a chroot an what do they have?
Wouldn't this only be a threat if there was a bug within the Mystic software itself?
I know this is probably a moot point, but just opening it up for a
little friendly discussion.
there's bugs in all software... compilers have gone off down the track lik all other software and things just aren't as tight and fully controlled as they used to be... consider if there's a read that puts data into a buffer some sort without checking if the amount of data can fit into that buffer. classic buffer overrun... now if someone can figure out where it is, they craft a specific blog of data for that overrun... it will overwrite code a the end of the buffer and when that code goes to be executed, it is not mystic's code any more but that of the attacker that created the crafted blob... now they've got an out and we're off to the races...
I know this is probably a moot point, but just opening it up for a little friendly discussion.
:)
Thanks for not banning me from the echo :)
--- Mystic BBS v1.05/OS2
* Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18)
there's bugs in all software... compilers have gone off down the
track lik all other software and things just aren't as tight and
fully controlled as they used to be... consider if there's a read
that puts data into a buffer some sort without checking if the amount
of data can fit into that buffer. classic buffer overrun... now if
someone can figure out where it is, they craft a specific blog of
data for that overrun... it will overwrite code a the end of the
buffer and when that code goes to be executed, it is not mystic's
code any more but that of the attacker that created the crafted
blob... now they've got an out and we're off to the races...
I guess you are right. Although when I try to write my Wildcat! mods,
I try to NOT have any bugs in them. Then again, that's not to say
there aren't any in the WC! WCX decompiler within WINServer itself :)
So, I still see your point.
I know this is probably a moot point, but just opening it up for
a little friendly discussion.
:)
Thanks for not banning me from the echo :)
Thanks for not banning me from the echo :)
--- Mystic BBS v1.05/OS2
* Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18)
Are you by chance able to add a MSGID to your messages with Fastecho?
no, fastecho does not do that... that's not part of the mail tosser's job... the message creation should be doing that... either when it is created in an editor or when it is created in the BBS message bases...
On 7/18/2017 8:29 PM, robert wolfe -> mark lewis wrote:
Are you by chance able to add a MSGID to your messages with Fastecho? This version of Mystic doesn't seem to do so, which is causing a lot of dupes w tossers that can't seem to dupecheck messages without one. I hate to say i but mine being one of them.
Ok, no worries. He's using a very early version of Mystic that isn't suppo any more so there's no fixing it until I switch tossers to a more capable checker apparantly. :(
Are you by chance able to add a MSGID to your messages with Fastecho? This old version of Mystic doesn't seem to do so, which is causing a lot of dupes with tossers that can't seem to dupecheck messages without one. I hate to say it, but mine being one of them.
Also, as I mentioned in another echo, your Agoranet node is still not responding. (hint: Omicron Theta). ;)
Ok, no worries. He's using a very early version of Mystic that
isn't suppo any more so there's no fixing it until I switch
tossers to a more capable checker apparantly. :(
Kinda hoping to see an updated OS/2 version soon :) If there is
anything I can do to help speed that process along, I will :)
--- Mystic BBS v1.05/OS2
* Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18)
--- Mystic BBS v1.05/OS2
* Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18)
Hasn't there been quite a few OS/2 releases since 1.05? Something much more recent even? Heck, I thought there was one for the 1.11 full releaseeven.
no, fastecho does not do that... that's not part of the mail tosser's
job... the message creation should be doing that... either when it is
created in an editor or when it is created in the BBS message
bases...
Ok, no worries. He's using a very early version of Mystic that isn't supported any more so there's no fixing it until I switch tossers to a more capable dupe checker apparantly. :(
Are you by chance able to add a MSGID to your messages with Fastecho?
This version of Mystic doesn't seem to do so, which is causing a lot
of dupes w tossers that can't seem to dupecheck messages without one.
I hate to say i but mine being one of them.
FE/2 SHOULD be adding them.
Sound you do a full dump of my message in a reply with the path and PID/TID information?
@TID: FastEcho 1.46.1 43258
On 07-85-39, Nicholas Boel said...
On 7/18/2017 8:29 PM, robert wolfe -> mark lewis wrote:
Are you by chance able to add a MSGID to your messages with Fastecho?
This version of Mystic doesn't seem to do so, which is causing a lot
of
dupes w tossers that can't seem to dupecheck messages without one. I
hate to say i but mine being one of them.
FE/2 SHOULD be adding them. Sound you do a full dump of my message in
a
reply with the path and PID/TID information?
--- Mystic BBS v1.05/OS2
* Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18) SEEN-BY: 34/999 90/1 116/17 18 116 120/331 123/140 141 128/187 130/20 SEEN-BY: 135/300 140/1 154/10 218/510 700 230/150 240/1120 249/303
250/1
SEEN-BY: 261/38 100 266/404 267/155 280/1027 282/1031 1056 292/140 908 SEEN-BY: 320/119 219 340/400 393/68 75 396/45 712/848 801/161 189
2320/100
SEEN-BY: 2320/105 3634/12 15 22 27 42 50 666 3828/12 5020/1042
@PATH: 116/18 261/38 3634/12
Hasn't there been quite a few OS/2 releases since 1.05? Something much more recent even? Heck, I thought there was one for the 1.11 full
release even.
ahem... there wouldn't be a problem if people didn't insist on creating dupe loops... apparently they lead to messages being duplicated and sent to systems more than once... seems the original creators had it right to start with ;)
nope... i asked for one during the 1.11 alpha stage but it never came to pass and being able to build one was killed in birth when g00r00 wiped
the repository and removed the code...
ahem... there wouldn't be a problem if people didn't insist on
creating dupe loops... apparently they lead to messages being
duplicated and sent to systems more than once... seems the original
creators had it right to start with ;)
Too bad the original creators didn't think about people going off on
power trips and leaving an entire zone (besides a few "friends") out
of an echo.
Had that not happened, the Fidoweb probably would never have been
born.
it cannot... it is not part of FE's job...
it cannot... it is not part of FE's job...
Ok, for some reason I was under the impression the mail processor did that. Thanks for the clarification.
First, should be fixed now :)
Second, try polling me via binkp at os2bbs.org instead :) If not,
then please let me know via netmail what kind of issue you are
having.
you should read the network's history, my friend ;)
Had that not happened, the Fidoweb probably would never have been
born.
voting with your feet is a long time option in any FTN... controlling
your members is still a thing that need be done... one takes what
steps they feel necessary to combat a problem... that was done and the ""other side"" didn't like it but they seem to have learned :shrug:
voting with your feet is a long time option in any FTN... controlling
your members is still a thing that need be done... one takes what
steps they feel necessary to combat a problem... that was done and
the ""other side"" didn't like it but they seem to have learned
:shrug:
The people involved had no choice.
Even when it was brought up in a private echo before it happened, more people disagreed with it than agreed with it.
Yet it was still done. It was a power trip since there were no other
"star systems" out there at the time. You say "controlling your
members" like the NAB are in charge of Fidonet? If that's what you
truly believe, you can get bent, good sir.
The people involved had no choice.
they had all the choice but they did nothing... even when asked
directly to do something about the problem they did nothing...
Even when it was brought up in a private echo before it happened,
more people disagreed with it than agreed with it.
not that i saw...
there were more "please do something" than there
were "let it be" votes... and then one of the loudest and most
prolific "please do something" voters took steps to stab everyone in
the back and link things around the back side...
Yet it was still done. It was a power trip since there were no
other "star systems" out there at the time. You say "controlling
your members" like the NAB are in charge of Fidonet? If that's
what you truly believe, you can get bent, good sir.
now you're confusing things and doing what others have done, blending
this and that to come up with gack but there's no gack on the menu...
stop it, mon... no one is in charge of fidonet and never have been...
the NAB are responsible to their clients and their clients only...
there have been and were other ""stars"" (aka distribution systems)
since forever... at one time there were three known distribution
systems and they all operated in much the same fashion...
I don't know why you like to keep bringing this up
supported any more so there's no fixing it until I switch tossers to
a more capable dupe checker apparantly. :(
and arguing about it,
This all started with asking someone if they could provide a MSGID. There were dupes in Fidonet long before the Fidoweb,
nope... i asked for one during the 1.11 alpha stage but it never came to pas
and being able to build one was killed in birth when g00r00 wiped the repository and removed the code...
--- Mystic BBS v1.05/OS2
* Origin: Neptune's Lair/2 * Olive Branch MS * os2bbs.org (1:116/18)
Hasn't there been quite a few OS/2 releases since 1.05? Something much mor recent even? Heck, I thought there was one for the 1.11 full release even.
So found the 1.07 DOS full release. It seems to be working better thanthe
1.05 release I was trying out. Now to find the native OS/2 version, or I could just stick with the DOS version :)
Ok. You should probably upgrade to 1.07.3 at the very least though.
And while you're doing all that, you might want to check into why winserve is answering my binkp polls - correction: not answering at all anymore - b doesn't have an Agoranet AKA. Everything was fine for months, if not years until something happened within the past month or two.
Because it's not winserver.us anymore. It's winserver.org.
Try setting your end to connect to me at winserver.org, or better
still, os2bbs.org, since that machine now handles the majority of
all my mail processing.
So found the 1.07 DOS full release. It seems to be working better than the 1.05 release I was trying out. Now to find the native OS/2 version, or I could just stick with the DOS version :)
Hasn't there been quite a few OS/2 releases since 1.05? Something much more recent even? Heck, I thought there was one for the 1.11 full
release even.
All I could find on the Mystic website was a 1.05 release.
I believe the latest versions of OS/2 were the 1.08 alphas, but I
never kept any of the alpha releases in my archives.
| Sysop: | Winzlo |
|---|---|
| Location: | Minnesota, USA |
| Users: | 11 |
| Nodes: | 16 (0 / 16) |
| Uptime: | 495940:58:28 |
| Calls: | 82 |
| Files: | 1,070 |
| D/L today: |
27 files (11,920K bytes) |
| Messages: | 286,980 |