I was able to connect to multiple nodes while receiving the “registration refused” message. I changed my password to something incorrect, and connected just now. See attached screenshot (if attachments don’t work on this list, I uploaded it here: https://s3.amazonaws.com/bucket.stuff/Screen+Shot+2019-03-13+at+11.49.06+AM....) -Brad / KR4DIO <Screen Shot 2019-03-13 at 11.49.06 AM.png>

...

On Mar 13, 2019, at 11:28 AM, Bryan Fields <Bryan@bryanfields.net <mailto:Bryan@bryanfields.net>> wrote:

On 3/13/19 12:23 PM, brad@kr4d.io <mailto:brad@kr4d.io> wrote:

...

That was it — thanks!

This seems like a pretty big security hole, though. I successfully connected to multiple nodes even though my password was wrong.

You shouldn't be able to connect to any nodes if your not registered. I did pull the logs and at no time was your node registered, nor in the rpt_extnodes list. Unless you had the nodes configured manually, you're not going to be able to connect to them.

73's -- Bryan Fields

727-409-1194 - Voice http://bryanfields.net <http://bryanfields.net/> _______________________________________________ App_rpt-users mailing list App_rpt-users@lists.allstarlink.org http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.