TIP: Click on subject to list as thread! ANSI
echo: bluewave
to: BRUCE CLARK
from: mark lewis
date: 2004-04-28 06:25:40
subject: BBSNETS BBS

BC>> (Error opening d:\wc5\wcwork\node3\qwk\BBSNETS.ptr)

 ML>> ouch! if you are seeing that as an error message from the
 ML>> bbs software, that's ugly... no user should ever see any
 ML>> local directory stuff from an online system... that's a
 ML>> major security risk if ever there was one...

 BC> I think his system only lets you see that to know why the
 BC> requested transfer won't take place, otherwise some people
 BC> would try the download over, and over, and over, and ....
 BC> There's no way you can actually access that file directly.

its not the file that's the problem... if i were a hacker and trying to get
into his system, the error message above gives me a lot more info about his
drive layout that i may be able to use in finding a hole to get in thru or
a place to go looking for data to gather after i get in... in this case, i
specifically know that his wildcat stuff is installed onto his D: drive or
at least uses that drive...

 BC> Being able to upload a PTR is part of the QWK configuration
 BC> menu. You can do the configuration offline, then upload the
 BC> PTR file, saving long distance fees in the old days.

you're looking at the wrong tree WRT my comment about a security hole ;)

)\/(ark

* Origin: (1:3634/12)
SEEN-BY: 633/267 270
@PATH: 3634/12 106/2000 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.