Question Password encryption/decryption bug

Hi guys, I have a stock TBAMud password bug. If you want me to publicize it I will, otherwise email me at ckimmett@rogers.com and I'll communicate it there. If there are a lot of TBAMuds running i'd rather not let the entire following know.

I'd suggest going to the mud (tbamud.com port 9091). See if you can get to a postmaster and mudmail Rumble. If not, send him a tell. He'll usually see it at some time. Ask him to confirm here when he has it.

I sent you an email from moshehwebservices<at>live.com

Happy to get more info, especially if this is some sort of compromise of player password security!

Regards,
Mosheh (Zusuk)

I've been in contact with the OP and the issue isn't exactly new - it's been around for a long time, at least back to the earliest circle3 muds, perhaps as far as circle 2. It basically boils down to a limitation in the crypt library.

This code hasn't been changed for equally as long, and could really need an upgrade (I think I've stated this earlier, it's in interpreter.c, the login state machine...). I'll have a look when I have the time.