Subj : Yet another 2oFB apology. :/
To   : Nightfox
From : apam
Date : Mon Nov 03 2025 12:53 am

 > What do you mean when you say they utilized weak settings?  What
 > settings can a BBS user configure that would be 'weak' in this
 > instance?  And what is s20g2? 

What paulie was refering to was the access to the FSX_DAT area, it's very
easy to fake oneliners and say they are written by someone else as for
some reason whoever made the oneliners originally used a field in the
message body as who it's from, rather than the from field of the message.

 > A user on any BBS could create an account with any username, so they
 > could potentially create an account with the same name as someone else.

Yeah, they could, but that wasn't the case in this instance, in this
instance it was a user name of NIXDORF that was creating IBBS oneliners
from other people, and while he could have for example signed up as Avon
on 20 for beers, he couldn't sign up as Paulie420 as that username is
taken there, but he could post oneliners that appear from Paulie420 as
NIXDORF.

Locking down the FSX_DAT area will fix this, as paulie has done.

Maybe the oneliners needs to be strengthened a bit to validate the from
field with who the message is actually from? I don't know who wrote the
original mystic mod (i think it might have been gryphon?), but I think it
would be fairly easy to do and maintain backward compatability.

Andrew


--- envy/0.1-8c9ebf2
 * Origin: Quinn - Random Things - bbs.quinnos.com:2323 (21:3/197)

.