Results 1 to 2 of 2

Thread: Incompetent forum administrators

  1. #1
    Member
    Join Date
    Jul 2011
    Location
    Australia
    Posts
    42

    Incompetent forum administrators

    Strange that there's nothing in the Announcements forums about the forum administrators' reckless disregard for users' security. I presume we've all received emails saying "The system was put into maintenance mode after we discovered the installation has been targeted with a SQL injection attack where the attacker potentially retrieved email addresses, usernames and passwords. The vBulletin software was updated to the latest version (which is not vulnerable) and we have forced all users to change their passwords".

    In other words you're storing our passwords unencrypted. Thanks for that. And you were too lazy or incompetent to install the latest vBulletin software which would have prevented the vulnerability.

    If those two things alone don't show how unfit you are to be operating this forum, the fact that you fail to understand the seriousness of a breach should. The email was signed off with a chirpy "Our sincere apologies for the inconvenience!" - including the exclamation mark. You may as well have included a winking smiley and a few words about what a jolly wheeze this whole security caper is.

  2. #2
    Zarafa

    Join Date
    Jan 2009
    Location
    Hanover, Germany
    Posts
    1,890
    Quote Originally Posted by philled View Post
    In other words you're storing our passwords unencrypted.
    No, thats not true. Vbulleting by default stores only a salted hash of your password. This may he not been super clear in the email being sent out.
    Regards Felix

    How to get Kopano

    Zarafa ALPHA/BETA/RC feedback in BETA forum please.
    Zarafa IRC chat: irc.freenode.com > #zarafa
    Zarafa documentation: http://documentation.zarafa.com/

    No support via PM! Please contact our sales team for an offer if you want my full attention.

Similar Threads

  1. Forum-Search does not work
    By fafische in forum Beta Feedback
    Replies: 1
    Last Post: 22-01-2015, 08:59 AM
  2. Multiple Administrators at the same time.
    By benalcock in forum Administration and Usage
    Replies: 3
    Last Post: 07-12-2012, 07:27 AM
  3. Forum move to vBulletin completed
    By Dominique in forum Zarafa Announcements
    Replies: 12
    Last Post: 15-05-2012, 03:13 PM
  4. users as administrators within their group
    By Marmu in forum Installation and Configuration Archives
    Replies: 2
    Last Post: 30-09-2010, 02:41 PM
  5. Forum RSS feeds, Issue tracker
    By joti in forum Beta Feedback Archives
    Replies: 2
    Last Post: 02-05-2009, 12:25 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •