vBulletin Security Flaw Makes BBC News

[Expired Account 2]

Same thing to me 😛

Anyway, you can argue about a link on a post here, I am goin out to enjoy my night, Thanks for playing 😀

I never knew going into a different room to watch a film was going out to enjoy. 😛

and playing? this was more of a warmup than a game. 😀

I thought the topic is about vb's faulty update. 😕

It was. I was just accused of showing people how to hack the forums when I was basically innocent.

A google search of how to hack vbulletin forums would be more useful.

and from what I can see it's crap and not one that I know of so I'm happy. 😛

 

[spyka]

It's not even hacking, it's seaching a word in the FAQ. It would only become illegal if you used the database details to access the database (Section 1 of the Computer Misuse Act 1990 in the UK).

If you were to change the data in the database it then becomes a crime under Section 3 of the same act

 

[Expired Account 2]

It's not even hacking, it's seaching a word in the FAQ. It would only become illegal if you used the database details to access the database (Section 1 of the Computer Misuse Act 1990 in the UK).

If you were to change the data in the database it then becomes a crime under Section 3 of the same act

OOO Spyka knows his laws. 😉

 

[Justin]

Staff can still remove links and such if they feel it is unsuitable, meaning it can still be taken out no matter how much you try to say it is legal 😛

 

[Expired Account 2]

Staff can still remove links and such if they feel it is unsuitable, meaning it can still be taken out no matter how much you try to say it is legal 😛

but then you look hugely unprofessional and retarded if you do 😉
and not to mention that staff member gets owned. 😀

 

[Justin]

Staff can still remove links and such if they feel it is unsuitable, meaning it can still be taken out no matter how much you try to say it is legal 😛

but then you look hugely unprofessional and retarded if you do 😉
and not to mention that staff member gets owned. 😀

That is a matter of opinion.

 

[Cloverfield]

Luckily I'm on 3.8.0.

 

[Jonathan]

It's not even hacking, it's seaching a word in the FAQ. It would only become illegal if you used the database details to access the database (Section 1 of the Computer Misuse Act 1990 in the UK).

Well UK laws are irrelevant really, as FP isn't necessarily a British website.

 

[AnAccount]

This is the first time I have ever heard of a forum software making the news because of security issues. They used to just send out emails. Wow. Probably a good thing I'm not a Vbulletin user.

 

[el canadiano]

Before phpBB and MyBB had security issues (before either of them got security audits), they never made the news for this stuff.

 

[AnAccount]

Before phpBB and MyBB had security issues (before either of them got security audits), they never made the news for this stuff.

Yeah, but that's a bit of a difference, though, isn't it? PHPBB and MyBB are free, but Vbulletin you have to pay for, so I have a feeling that may be why it got in the news, as Vbulletin is a product that people purchase for their forums, whereas PHPBB and MyBB are free for all users.

 

[Expired Account 2]

Before phpBB and MyBB had security issues (before either of them got security audits), they never made the news for this stuff.

Yeah, but that's a bit of a difference, though, isn't it? PHPBB and MyBB are free, but Vbulletin you have to pay for, so I have a feeling that may be why it got in the news, as Vbulletin is a product that people purchase for their forums, whereas PHPBB and MyBB are free for all users.

So what? It's nothing big... they found 1 exploit for VB...
My breakdown of PHP, MyBB and VB exploit knowledge is:
VBulletin: 12 exploits.
MyBB: 5 exploits.
phpBB: 18 exploits.

They are the "private" and unknown exploits... it's nothing big...

 

[el canadiano]

Before phpBB and MyBB had security issues (before either of them got security audits), they never made the news for this stuff.

Yeah, but that's a bit of a difference, though, isn't it? PHPBB and MyBB are free, but Vbulletin you have to pay for, so I have a feeling that may be why it got in the news, as Vbulletin is a product that people purchase for their forums, whereas PHPBB and MyBB are free for all users.

But the thing with the open source community is that they get money from donations or other means, and they get a lot of money when they go big. So, eventually, yeah. They got the money to get their security audits done. What surprises me is that overall, phpBB and MyBB have both been much better than vBulletin ever since Kier Darby left the team.

 

[spyka]

phpBB *HAS* made the news before because of a security issue - http://news.bbc.co.uk/1/hi/technology/4117711.stm

 

[el canadiano]

My bad then. But I'm not surprised, because phpBB was pretty bad up until they got their audit in 2.0.18.

 

[iGame]

Nice to hear that VBulletin is worth the money

 

[Grumpy]

Wow, sounds very, very serious, hopefully all forums have run the patch now.

 

[Marie 1988 Forum]

phpBB *HAS* made the news before because of a security issue - http://news.bbc.co.uk/1/hi/technology/4117711.stm

My bad. I stand corrected. I read the article when it was originally posted. I also vividly remember seeing this on the news at the time