• Re: 3.19b not compatible with Windows XP?

    From Nelgin@1:103/705 to cadeon on Fri Jul 8 00:30:46 2022
    On Thu, 7 Jul 2022 16:24:29 -0700
    "cadeon" <cadeon@VERT> wrote:

    Spun up a Windows XP vm to try out synchronet after having some
    struggles on Linux (x64). Figured XP would be the best choice for
    full compatibility- dos, etc.

    sbbsctrl.exe throws 'The procedure entry point inet_ntop could not be
    located in the dynamic link library WS2_32.dll'

    So you can't get it working on Linux or on Windows. Why didn't you
    bother asking for help troubleshooting the Linux side?
    --
    End Of The Line BBS - Plano, TX
    telnet endofthelinebbs.com 23
    ---
    þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to cadeon on Fri Jul 8 11:28:10 2022
    Re: 3.19b not compatible with Windows XP?
    By: cadeon to Digital Man on Thu Jul 07 2022 08:10 pm

    I would enjoy staying on XP if it's not too much bother. There's something cool about an "old" stack... but I have no problem with going to a newer windows if that's what needs to happen.

    I solved the inet_ntop issue, not too difficult, but now I see that archive.dll requires bcrypt.dll which isn't included in XP either. So I'm looking into resolving that. We don't need to create or extract password-protected ZIP files in the BBS, so I think we can do without the crypto support in libarchive (archive.dll) if I can figure out how.
    --
    digital man (rob)

    Sling Blade quote #6:
    Karl: he should've had a chance to grow up. He would had fun some time.
    Norco, CA WX: 78.3øF, 58.0% humidity, 1 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to MRO on Mon Jul 11 14:07:14 2022
    Subject: Re: 3.19b not compatible with Windows XP?
    @MSGID: <62CC66D4.38537.dove-syncdisc@bbs2.ipingthereforeiam.com>
    @REPLY: <62CB8FE6.7131.sync@bbses.info>
    @TZ: ff10
    On 7/10/2022 22:50, MRO wrote:
    Re: Re: 3.19b not compatible with Windows XP?
    By: dragon to MRO on Sun Jul 10 2022 09:48 pm

    > > OH NO! PLEASE DON'T LEAVE. COME BACK!
    >
    > > good luck with limewire too.
    > > ---
    > > � Synchronet � ::: BBSES.info - free BBS services :::
    >
    > So, what do you feel like you accomplished with this? I'm curious.

    that some asshole who keeps coming here under other names a few times a year. Are you shedding a tear for him? the angry guy that thinks it's okay to run xp on a vm and become a botnet. what great things he could have contributed.

    what do you feel you accomplish by portscanning the whole internet and making a list?

    ---
    � Synchronet � ::: BBSES.info - free BBS services :::

    I think you did little to convince him that running XP might be bad.
    You just chased him off. I wouldn't call that a "win", but I really
    don't understand your goals.

    It's interesting to see how confident you are that your half-baked
    opinions are fundamental "truths".

    I'm not scanning the Internet. I'm reading the reports of big companies
    that are scanning the Internet at scale. Occasionally I'll scan an IP
    when it looks like they might have changed their BBS port from what I
    have in the database.

    If you don't like my BBS list, don't use it. Simple.

    I think there are more than a few people that think what I'm doing has
    some value, but mainly it amuses me, which is really what matters.

    Why do you troll around message bases treating strangers like crap?
    Different strokes, I guess.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From cadeon@1:103/705 to Digital Man on Mon Jul 11 19:14:32 2022

    Re: 3.19b not compatible with Windows XP?
    By: cadeon to Digital Man on Fri Jul 08 2022 12:09 pm

    It appears I fixed the 2 dependencies (inet_ntop() and bcrypt.dll), so give tonight's build for Windows a try on XP. It worked for me in an XP-SP3 VM.
    --
    digital man (rob)

    Thank you sir - fixed it for me. Launches as expected. I'm happy to be the XP beta tester if XP stays on the menu.
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to MRO on Tue Jul 12 17:39:44 2022
    Subject: Re: 3.19b not compatible with Windows XP?
    @MSGID: <62CDEA23.38551.dove-syncdisc@bbs2.ipingthereforeiam.com>
    @REPLY: <62CCE624.7136.sync@bbses.info>
    @TZ: ff10
    On 7/11/2022 23:10, MRO wrote:
    Re: Re: 3.19b not compatible with Windows XP?
    By: dragon to MRO on Mon Jul 11 2022 02:07 pm

    >
    > I think you did little to convince him that running XP might be bad.
    > You just chased him off. I wouldn't call that a "win", but I really
    > don't understand your goals.

    i don't give a shit what you think or what you call things.

    > It's interesting to see how confident you are that your half-baked
    > opinions are fundamental "truths".

    i'm glad you find me interesting.

    and my opinion about windows xp IS SOOOOO FUCKING HALF BAKED, isn't it.

    > I'm not scanning the Internet. I'm reading the reports of big companies
    > that are scanning the Internet at scale. Occasionally I'll scan an IP
    > when it looks like they might have changed their BBS port from what I
    > have in the database.

    whatever dude. you are part of the problem. we are probably getting more attacks because of your website. my friend was running a majorbbs at home and didn't even advertise and there it is on your site, NAMED, even.

    > I think there are more than a few people that think what I'm doing has
    > some value, but mainly it amuses me, which is really what matters.

    maybe you should sell your lists(if you aren't already doing so).

    >
    > Why do you troll around message bases treating strangers like crap?
    > Different strokes, I guess.


    I can't remember if i told you to fuck off. but fuck off.
    ---
    � Synchronet � ::: BBSES.info - free BBS services :::


    You're an idiot.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to Xerxes on Tue Jul 12 17:40:58 2022
    Subject: Re: 3.19b not compatible with Windows XP?
    @MSGID: <62CDEA6D.38552.dove-syncdisc@bbs2.ipingthereforeiam.com>
    @REPLY: <62CDCB98.47840.sync@vert.synchro.net>
    @TZ: ff10
    On 7/12/2022 09:38, Xerxes wrote:
    Re: Re: 3.19b not compatible with Windows XP?
    By: dragon to MRO on Mon Jul 11 2022 02:07 pm

    >> what do you feel you accomplish by portscanning the whole internet and
    >> making a list?

    dr> I think there are more than a few people that think what I'm doing has
    dr> some value, but mainly it amuses me, which is really what matters.

    I very much like your list and the statistics and resources on your page.

    My BBS is constantly hit with attacks. Constantly. But it doesn't take long to figure out that they are scripts targeting Linux systems to get root access, hitting anything that answers telnet or ssh with any kind of login prompt. Nothing to do with your page.
    ---------------------------------------------------------
    Sysop of Desert Rats Sanctuary --- https://bbs.kn6q.org

    ---
    � Synchronet � Desert Rats Sanctuary --- https://bbs.kn6q.org

    Yeah, there's something deeply wrong with that guy.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to Xerxes on Tue Jul 12 17:44:58 2022
    Subject: Re: 3.19b not compatible with Windows XP?
    @MSGID: <62CDEB5E.38553.dove-syncdisc@bbs2.ipingthereforeiam.com>
    @REPLY: <62CDCB98.47840.sync@vert.synchro.net>
    @TZ: ff10
    On 7/12/2022 09:38, Xerxes wrote:
    Re: Re: 3.19b not compatible with Windows XP?
    By: dragon to MRO on Mon Jul 11 2022 02:07 pm

    >> what do you feel you accomplish by portscanning the whole internet and
    >> making a list?

    dr> I think there are more than a few people that think what I'm doing has
    dr> some value, but mainly it amuses me, which is really what matters.

    I very much like your list and the statistics and resources on your page.

    My BBS is constantly hit with attacks. Constantly. But it doesn't take long to figure out that they are scripts targeting Linux systems to get root access, hitting anything that answers telnet or ssh with any kind of login prompt. Nothing to do with your page.
    ---------------------------------------------------------
    Sysop of Desert Rats Sanctuary --- https://bbs.kn6q.org

    ---
    � Synchronet � Desert Rats Sanctuary --- https://bbs.kn6q.org

    I forgot to say thanks. Thanks.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From dragon@1:103/705 to MRO on Wed Jul 13 10:34:04 2022
    Subject: Re: 3.19b not compatible with Windows XP?
    @MSGID: <62CED7E2.38563.dove-syncdisc@bbs2.ipingthereforeiam.com>
    @REPLY: <62CE3BB5.7147.sync@bbses.info>
    @TZ: ff10
    On 7/12/2022 23:27, MRO wrote:
    Re: Re: 3.19b not compatible with Windows XP?
    By: Xerxes to dragon on Tue Jul 12 2022 01:38 pm

    > dr> I think there are more than a few people that think what I'm doing has
    > dr> some value, but mainly it amuses me, which is really what matters.
    >
    > I very much like your list and the statistics and resources on your page.
    >
    > My BBS is constantly hit with attacks. Constantly. But it doesn't take
    > long to figure out that they are scripts targeting Linux systems to get root

    and those scripts use lists like this guy to find servers on the internet to attack. this guy is doing all the hard work for them.

    it's already working. look at all the spam.
    now imagine what else is happening that we do not see.
    ---
    � Synchronet � ::: BBSES.info - free BBS services :::

    If you would just take your meds, you might not imagine so much.

    ---
    þ Synchronet þ IPTIA - bbs2.ipingthereforeiam.com:2323
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Tracker1 on Sat Jul 16 21:01:42 2022
    Re: Re: 3.19b not compatible with Windows XP?
    By: Tracker1 to Tim Radde on Sat Jul 16 2022 01:30 pm

    On 7/9/22 14:05, Tim Radde wrote:

    If they run in a VM? Who would care. Not like some hacker going to
    be able to cause much of a problem there. If you've got nothing on
    your Windows system of interest then once again who cares. Oh, you
    care. Then don't run it which you don't.

    Well, there are escalation attacks into VM host environments, so depends
    on the VM host and how old it is. Beyond this, it doesn't take much to
    be joined into a botnet harming others, it doesn't even take
    administrative privileges. You may not care about *YOUR* system, but
    when your systems attack mine, I care quite a lot.

    absofuckinglutely.
    i'm glad there's atleast a few people here with a brain.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From MRO@1:103/705 to Tracker1 on Sat Jul 16 21:04:02 2022
    Re: Re: 3.19b not compatible with Windows XP?
    By: Tracker1 to poindexter FORTRAN on Sat Jul 16 2022 01:34 pm

    On 7/9/22 08:56, poindexter FORTRAN wrote:

    There is a version called TinyXP that strips out most everything from the full version, including all of the apps (including IE) and theoretically would have a much smaller attack surface than plain Windows. It's also tiny and runs in a small VM nicely - when I ran it, it idled at 118 MB of RAM and ran my BBS in a 512 MB VM nicely.

    I don't know if it's still a valid option.

    Should be, and while I would generally avoid using Windows altogether
    for anything facing the internet, if I wanted to use an older version of windows, that's likely what I'd do... Did similar with slim win98 for a while...

    Would also add in a software firewall, and severely restrict inbound/outbound access, and maybe even isolate it from talking to
    anything else other than the router entirely.

    you can do this and that and do it with a wiffleball bat.

    But the best thing is to just do things the right way the first time.
    people should take the path of least resistance and not attempt to put old exploitable operating systems on the internet. I don't care if they jail their system. someone can use commonly used 'hacktools' to take it over and then they're giving away a free server to everyone on the internet to do whatever they wish. that's just stupidity.

    that's why i say: don't be a nick andre.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From cadeon@1:103/705 to MRO on Mon Jul 18 21:04:48 2022
    I agree with everything going on here. Running an insecure OS is stupid, especially without the reasonable steps many folks are mentioning here. It's not just your machine you're risking, it's everyone else's, because your machine may get used as a platform for further attacks.

    *but*

    <gets out a gas can to relight this flame war>

    According to shodan.io, there are 6,912 known Windows XP machines on the unrestricted open internet right now. Most of them are in Korea and China, and most of them have MS-SQL and/or Telnet open. So yea, they could be bots.

    If we widen that search to just any version of Windows, Shodan is aware of 2,815,587 exposed Windows machines. 1.3 million of which have 3389 (rdp) *open to the internet* - and half a million have WinRM open to the internet. There are certainly bots here.

    Windows XP makes up less than a quarter of a percent of the open internet accessible windows hosts right now.

    So,
    I agree that connecting something to the internet in an insecure manner is a bad idea, and we need to monitor our stuff inbound and outbound.

    I also agree that security through obscurity isn't a thing.

    *but*

    XP isn't a target anymore. It's not very capable and the exploitable host count is tiny. Windows 7 definitely is a target right now, as it's modern enough to be useful and it's unmaintained.

    Windows 10, 11, or Linux can be easily exploited if the administrator doesn't update or monitor their stuff, the systems are useful and there's a lot of them. The attack surfaces on these modern systems is much larger.

    It's got more to do with the operator than it does the specific OS.

    But the best thing is to just do things the right way the first time.
    ^ I agree completely. But OS selection is not the silver bullet to building a sane/secure hosting environment. It's part of it, and depending on what you select, you will have differing sets of other things you need to do in order to host responsibly; many of the things touched on in this thread included.

    (quietly dons a fire suit)
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to MRO on Sun Jul 24 16:00:34 2022
    On 7/21/22 20:38, MRO wrote:
    Router:
    https://www.aliexpress.com/item/3256803804266682.html

    LTE Modem:
    https://www.aliexpress.com/item/2251832653372597.html

    don't burn your house down with those things.

    LOL... I know of a few people using the router at least, which has been decent... haven't played with the LTE modem yet. AliExpress is really
    the only way to get a current LTE modem. As to the router, was less
    expensive and higher model than the ones in stock and available on Amazon.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to poindexter FORTRAN on Sun Jul 24 16:14:10 2022
    On 7/22/22 07:20, poindexter FORTRAN wrote:
    That's cool... I've got a 4-port intel mini box that has 4x 2.5Gb
    ports I'll be playing with next weekend.

    I keep seeing people running high-powered boxes as routers and running pfSense as a VM, for the time being I'm sticking with my appliance
    router. Running OpenWRT it seems to do OK for my needs; a 64 bit ARM processor and 512 GB of RAM should suffice.

    Yeah, when my home security system and cameras were added my router just doesn't seem to quite keep up, which is what brought the shift. May be
    using ProxMox on the device, and just map the other 3 ethernet ports
    into a VM for the router/firewall software. That way I can more easily
    run the couple other things I also want on there (pihole, wireguard, reverse-web proxy with https).

    I did see an interesting youtube video about a thin client with a
    PCI-e slot, for around $100 the tuber got the client, some cabling
    needed, and a 4-port gig ethernet card. 2.5ge a possibility, too.
    Tempting.

    Yeah, those are pretty cool... One thing to watch out for, is some
    devices that support 10g ports will only do 10g or 1g, not 2.5g, which
    is kind of wild. Just bringing it up, depending on any switches/hubs
    you plan to use.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)