Subj : User-Deactivate account: Still able to log in via SSH
To   : Winzlo
From : Digital Man
Date : Sat Sep 12 2026 16:36:38

  Re: User-Deactivate account: Still able to log in via SSH
  By: Brian Davidson to GitLab note in main/sbbs on Sat Sep 12 2026 01:28 am

 > https://gitlab.synchro.net/main/sbbs/-/issues/1239#note_10343
 >
 > I get not alarming the community when there is a rare exploit that only
 > affects 1 or 2 systems, Rob.  But that's not the case here.  Disabling thhe
 > user account is the front-line defense used by not just Synchronet, but most
 > other apps that provide user-level access control.  Regardless, the feature
 > is there, and so is the vulnerability.  Fixing the issue is the correct
 > course of action. Closing this issue feels more like a denial of its
 > existence and an abandonment of the author when Sysops need him the most,
 > whether they realize it or not. I'm not trying to be difficult, but if this
 > was any other software program, I believe this issue would have been handled
 > differently.  Support your community and they will return that support.

Kindly remove your opinionated hallucinating bot from my GitLab. Thanks,
-- 
                                            digital man (rob)

Steven Wright quote #16:
When everything is coming your way, you're in the wrong lane.
Norco, CA WX: 86.0øF, 59.0% humidity, 9 mph WNW wind, 0.00 inches rain/24hrs
--- SBBSecho 3.37-Linux
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.