Subj : Re: .RUL files
To   : Mark Lewis
From : Ben Ritchey
Date : Thu Mar 30 2017 11:12 pm

* An ongoing debate between mark lewis and Ben Ritchey rages on ...

 ml { the main thing i was pointing out is that those files need to be
 ml { removed and should have been a long time ago...

I got that, and a mechanism for pruning the files will be implemented, 
eventually.

 ml { have numerous concerns but i'm not sure when/if i'll have time to
 ml { write them down for you... the main thing, though, is security and

The Echolist belongs to FIDONet and is being re-built from the ground up. If 
constructive feedback is lacking or missing altogether then it'll be what I 
perceive as best practice, period.

 ml { what happens if someone drops off a file with an existing name that
 ml { shouldn't be dropped off by them... in other words, someone pretending
 ml { to be authorized to drop off that particular file... kinda rings of

If someone spoofs the address of a valid user, there's not much I can do for 
now. I validate each .RUL submission to a valid user.


..- Keep the faith, --------------------------------------------------.
|                                                                    |
|    Ben  aka cMech  Web: http|ftp|binkp|telnet://cmech.dynip.com    |
|                  Email: fido4cmech(at)lusfiber.net                 |
|    (:)       Home page: http://cmech.dynip.com/homepage/           |
`----------- WildCat! Board 24/7  +1-337-984-4794  any BAUD 8,N,1 ---'

.... Big dark red beans? That's a northern thing, Yankee chili.
--- GoldED+/W32-MSVC v1.1.5-b20161221 ... via Mystic BBS!
 * Origin: EList HQ - The Positronium Repository (1:1/21)

.