<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I was able to connect to multiple nodes while receiving the “registration refused” message. I changed my password to something incorrect, and connected just now. See attached screenshot (if attachments don’t work on this list, I uploaded it here: <a href="https://s3.amazonaws.com/bucket.stuff/Screen+Shot+2019-03-13+at+11.49.06+AM.png" class="">https://s3.amazonaws.com/bucket.stuff/Screen+Shot+2019-03-13+at+11.49.06+AM.png</a>)<br class=""><br class="">-Brad / KR4DIO<br class=""><br class=""><span id="cid:C926816D-C487-4949-BD92-35B0B33E5CA0@lan"><Screen Shot 2019-03-13 at 11.49.06 AM.png></span><br class=""><br class=""><div><blockquote type="cite" class=""><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><div class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On Mar 13, 2019, at 11:28 AM, Bryan Fields <<a href="mailto:Bryan@bryanfields.net" class="">Bryan@bryanfields.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 3/13/19 12:23 PM, <a href="mailto:brad@kr4d.io" class="">brad@kr4d.io</a> wrote:<br class=""><blockquote type="cite" class="">That was it — thanks!<br class=""><br class="">This seems like a pretty big security hole, though. I successfully connected<br class="">to multiple nodes even though my password was wrong.<br class=""></blockquote><br class="">You shouldn't be able to connect to any nodes if your not registered. I did<br class="">pull the logs and at no time was your node registered, nor in the rpt_extnodes<br class="">list. Unless you had the nodes configured manually, you're not going to be<br class="">able to connect to them.<br class=""><br class="">73's<br class="">-- <br class="">Bryan Fields<br class=""><br class="">727-409-1194 - Voice<br class=""><a href="http://bryanfields.net/" class="">http://bryanfields.net</a><br class="">_______________________________________________<br class="">App_rpt-users mailing list<br class="">App_rpt-users@lists.allstarlink.org<br class="">http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users<br class=""><br class="">To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"<br class="">You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. <br class=""></div></div></blockquote></div><br class=""></div></div></div></div></blockquote></div><br class=""></body></html>