I have a cool Idea for our network
check out this script and guess what I am trying to achieve.


// An Idea I have
var system_list = [
// Add member BBS addresses here
"member1.hobbyspace.net",
"member2.hobbyspace.net"
];

function broadcastAlert(message) {
for (var i = 0; i < system_list.length; i++) {
var socket = new Socket();
// Connect to the standard Synchronet SIM port (default 10000 or custom)
if (socket.connect(system_list[i], 10000)) {
// Send a raw instant message packet to the target system
socket.send("ALERT:" + message + "\r\n");
socket.close();
}
}
}

// Read event arguments passed by Synchronet
var eventType = argv[0];
var userName = argv[1];
var bbsName = argv[2];

if (eventType == "logon") {
broadcastAlert("[Hobbyspace] " + userName + " just logged into " + bbsName + "!");
} else if (eventType == "post") {
var areaName = argv[3];
broadcastAlert("[Hobbyspace] " + userName + " posted a new message in " + areaName + "!");
}

This looks like a cross-bbs notification system. By running this through some AI, it did pop up a few alerts as there is no error handling or any type of logging for troubleshooting. Also, there are no security controls such as encryption or some sort of trust model. With that being said, a threat actor would be able to spoof alerts and send them to all systems. These fake alerts could contain malicious code that could compromise host systems.

Subject: Ideas for hobbySpace qwk network
@MSGID: <6A394A02.513.hobbyspcsynchronet@JerseyJam.com>
@REPLY: <6A38C2FB.487.hobbyspcsynchronetbbs@Hobbyspc.synchro.net>
@TZ: c12c
From what I can figure out it, looks like a real-time notification broadcaster to member sub-domains of HobbySpace.net. Kinda cool dude. Looks like it's using the Inter-BBS Messaging service that's built into Synchronet over port 1000.

I imagine any BBS system that "signs up" to be part of the HobbySPC message network would be added as a subdomain your DNS server so the pages know where to go. IE. jerseyjam.hobbyspace.net (that would be me). Then when you broadcast a message using this script I would be included in the pool of systems. You could also just use their own FQDN so you don't have to keep managing your DNS server.

BTW - do you own HobbySpace.net? I see it was registered in March 2004.

-BB

---
￭ Synchronet ￭ Jersey Jam BBS - JerseyJam.com (1:266/325)

I wish I did own it. You got part of it, the other is instant messaging and stuff like that.