Subj : Mironet
To   : Oli
From : Alan Ianson
Date : Sat Feb 11 2023 08:19 am

>> ? 11 Feb 00:00:36 [78274] Warning: remote set UNSECURE session
>> + 11 Feb 00:00:36 [78274] pwd protected session (MD5)

> This means your system is sending a session password, but the remote session
> has no password set for incoming connections and returns M_OK 'non-secure',
> which gets logged as "Warning: remote set UNSECURE session".
> (a wrong password should return an error)

> It is not a password protected or encrypted session, even if binkd tells you
> so. It is a security flaw of binkd though.

Is that a misconfiguration at the remote end, there is no (or an incorrect) password set?

Binkd should not log "pwd protected session (MD5)" in that case.

--- BBBS/Li6 v4.10 Toy-6
* Origin: The Rusty MailBox - Penticton, BC Canada (1:153/757)

You are viewing proxied material from cvs.synchro.net. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.