Subj : Password question for blacklisted usernames?
To   : g00r00
From : Bj”rn Wiberg
Date : Tue Jul 27 2021 02:59 pm

Hello g00r00!

I just noticed that at the login screen, if one enters a blacklisted
(trashcan.dat) username, Mystic appears to proceed asking for a password
instead of asking for a[n allowed] username again:


[þ] Enter your username: 01                            
                                                       
Sorry, that username is unacceptable.                  
                                                       
[þ] Enter your password: **                            
                                                       
Invalid password.                                      
                                
[þ] Enter your password: **     
                                
Invalid password.               
                                
[þ] Enter your password: **                            
                                                       
Invalid password.                                      
                                                       
Reset password using e-mail?  Yes  No                  
                                                       
Send a password inquiry message to the SysOp?  Yes  No 

(disconnected)


There is no user with username "01" here, by the way. =)

Best regards
Bj”rn

--- Mystic BBS v1.12 A47 2021/07/23 (Linux/64)
 * Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)

.