Re: Password Question
By: Oli to Paul Hayton on Fri Jan 14 2022 12:51 pm
Hey Oli,
> Yes, that is another problem with binkp's flawed security model.
> I this use case one could try to use the perl-hooks for an workaround.
Simplest solution would be to check for the test AKA and then
> only present the relevant Fido AKA (and drop all your other AKAs). So call
from 3:770/999 only returns 3:770/100.
> The problem with this workaround is, that the node cannot receive any other
mails (from FSX) if ith's polling its mails, as long as the
> test AKA is configured. So could make the perl script a bit more complicated
and check, if there is anything in your outbound for
> 3:770/999 and if the outbound is empty, drop the Fido AKA.
You dont need a perl script to hide AKA's - it's a config option. Although
IIRC, you were playing with a perl script that enhanced the hide AKA option
that binkd provides.
On FSX Hub 3, it's a hub for multiple networks, but when anybody in FSX
connects to it, it'll hide the AKA's for the other networks that are not common
with the hub. The side effect is, if more than 1 address is in common (and thus
presented), then the password must be the same for each, otherwise you get that
"invalid password" type message.
...δεσ∩
--- SBBSecho 3.14-Linux
* Origin: I'm playing with ANSI+videotex - wanna play too? (3:633/509)
|
