[App_rpt-users] Registration Refused messages

[brad at kr4d.io]

I was able to connect to multiple nodes while receiving the “registration refused” message. I changed my password to something incorrect, and connected just now. See attached screenshot (if attachments don’t work on this list, I uploaded it here: https://s3.amazonaws.com/bucket.stuff/Screen+Shot+2019-03-13+at+11.49.06+AM.png)

-Brad / KR4DIO

<Screen Shot 2019-03-13 at 11.49.06 AM.png>

> 
>> On Mar 13, 2019, at 11:28 AM, Bryan Fields <Bryan at bryanfields.net <mailto:Bryan at bryanfields.net>> wrote:
>> 
>> On 3/13/19 12:23 PM, brad at kr4d.io <mailto:brad at kr4d.io> wrote:
>>> That was it — thanks!
>>> 
>>> This seems like a pretty big security hole, though. I successfully connected
>>> to multiple nodes even though my password was wrong.
>> 
>> You shouldn't be able to connect to any nodes if your not registered.  I did
>> pull the logs and at no time was your node registered, nor in the rpt_extnodes
>> list.  Unless you had the nodes configured manually, you're not going to be
>> able to connect to them.
>> 
>> 73's
>> -- 
>> Bryan Fields
>> 
>> 727-409-1194 - Voice
>> http://bryanfields.net <http://bryanfields.net/>
>> _______________________________________________
>> App_rpt-users mailing list
>> App_rpt-users at lists.allstarlink.org
>> http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
>> 
>> To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
>> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.keekles.org/pipermail/app_rpt-users/attachments/20190313/063d947a/attachment.html>