1. Forum
  2. FidoNet
  3. MYSTIC

  • Re: Incorrect logins, password reset e-mail/hackwarn sending etc.

    From g00r00@1:129/215 to Björn Wiberg on Mon Jul 11 16:25:52 2022
    * If someone exceeds the maximum login attempts (enters an incorrect password multiple times), gets prompt #538 (if the e-mail reset feature has been enabled) and then hangs up at that prompt, Mystic appears to
    send the password reset e-mail despite the fact that the user hung up --

    I have cleaned this up so it will simply shut down the node and do nothing, since the user never actually asked for the e-mail.

    * If a user attempts to deselect a (single) message base from new scans
    or QWK new scans, which has New Scan: Forced or QWK Scan: Forced,
    prompts #302/#406 do not seem to be shown any longer. (I know these

    I think I might have it right this time in the next build.

    * If someone exceeds the maximum login attempts, gets prompt #538, denies e-mail reset, gets prompt #475, chooses to send a password inquiry to the SysOp and then aborts the message from within the full screen editor, the recipient of the automatic hackwarn message appears to be set to be the SysOp rather than the potentially hacked user.

    Should be fixed in the next build thank you!

    ... Everyone is entitled to my opinion!

    --- Mystic BBS v1.12 A48 2022/07/11 (Windows/64)
    * Origin: Sector 7 * Mystic WHQ (1:129/215)
  • From g00r00@1:129/215 to Björn Wiberg on Tue Jul 12 08:45:42 2022
    * If someone exceeds the maximum login attempts (enters an incor password multiple times), gets prompt #538 (if the e-mail reset has been enabled) and then hangs up at that prompt, Mystic appea send the password reset e-mail despite the fact that the user hu

    I have cleaned this up so it will simply shut down the node and do nothing, since the user never actually asked for the e-mail.

    Thanks! But it will send a hackwarn message to the user before shutting down, right? As otherwise someone can repeatedly hang up at the password reset prompt and the user will never know about the failed login attempts...

    Yes, it should still send the hackwarn notification before shutting down. If it doesn't let me know! :)

    ... System halted - Press all keys at once to continue

    --- Mystic BBS v1.12 A48 2022/07/11 (Windows/64)
    * Origin: Sector 7 * Mystic WHQ (1:129/215)