Subj : Re: Minix
To   : tenser
From : Bob Worm
Date : Thu May 02 2024 06:13 pm

  Re: Re: Minix
  By: tenser to Nightfox on Fri Apr 19 2024 08:19:12

Hi, tenser.

 > The bug, of course, is constraining to the length of the user
 > supplied password; the effect was that entering _no_ password
 > automatically authenticated the password (empty strings always
 > compare equal).

That's pretty shocking... a good proportion of people would find that by accident!

I'm not hugely surprised, though.

BobW
--- SBBSecho 3.20-Linux
 * Origin: >>> Magnum BBS <<< - bbs.magnum.uk.net (21:1/205)

.