Board:   [fsxNet] Mystic BBS discussion/support
Subject: qico 0.60.1
From:    Alexey Matrosov(2:203/910)
Date:    Fri Sep 25, 2026 20:46

* Originally in enet.sysop
* Crossposted in fidonews
* Crossposted in fido_sysop

Hello All,

qico 0.60.1 is out.

A security release.
It hardens BinkP session and password handling:
- handshake and file commands are now accepted only in the right phase,
  sessions offering conflicting passwords in one M_ADR are refused.
- plaintext password compares are case-sensitive.
- failed passwords are no longer logged.
- short reads and writes are treated as errors.
- busy password-protected aka no longer opens an unprotected session.

Alongside those, the release fixes outbound busy-file handling, UTC
timestamps on BinkP transfers, the "if date" condition, longrescan,
showpkt logging and inbound modem log names.

New in this version are the kill-old-bsy keyword and systemd socket
activation for inbound ifcico.

Binaries for Debian 12 and NetBSD 11 are attached.
See 'Changes' for the full notes.

Code and changelog: https://github.com/glasslike/qico

Mvh,
Alex.

---
 * Origin: Rabarber > Skelleftea > Sweden (2:203/910)

--- Mystic BBS v1.12 A49 2024/05/29 (Linux/64)
 * Origin: Altair IV BBS (altairiv.ddns.net:2323) (2:203/910)
.