Update: Forum Breach

[[md]MadMak[rus]]

If this happened once and nothing changed regarding security, this could happen again.

[[R-DEV]Mineral]

Originally Posted by [md]MadMak[rus]

If this happened once and nothing changed regarding security, this could happen again.

This is very true, hence we ask not to use the same password.

[Jacksonez__]

My password was 471 days old, lol. Had no idea.

[[R-DEV]​mectus11]

Well, you are running vBSEO, no surprise that this was going to happen eventually.

A blog article about it

Forum post.
vBulletin.org Forum - View Single Post - Here's The Real Reason vBSEO Abandoned Ship

You're close vbresults but you're missing the nitty-gritty per say, I was there and reporting to them about that exploit and also furious at them too when all this was going down .

People lost trust in it, that one exploit (can't remember the exact exploit i.e. not sure if it was the filestore one or not) was reported to them, their staff patched it on the site that reported the find and had planned to include the patch in the next release however that never happened and therefor a known exploit remained in the product through several variations of it over the course of one year give or take a month or two until the same exact forum owner was hacked again, he went to investigate and realized they had never included the original fix in the product... he had been hacked again by overwriting files that had the fix in it, with new fresh files that had the exploitable code still within well over a year later - I remember his comments and he was shocked to find that was how he was hacked again! vBSEO dropped not only the ball but the chain, the hook, and the crane it was attached to seemingly into the bottom of the ocean.

vBSEO was still alive for a while after that however to me, I noticed the decline right after that fiasco revealed itself. Their own site was infected, their download system also compromised from what I recall... so with that said I've seen a few asking for copies of vBSEO "I was licensed, I should be able to use a copy if I find it they left me hanging" or similar... well good luck hoping the copy you find even if from a friend was not already infected to begin with, might want to consider that based on the fact their site was compromised at one point in time, think of how many members were downloading files during that timeframe .

To this day I'm still fixing sites and the owners asking me "do you know how this happened" and in the footer is Search Engine Friendly URLs by vBSEO 3.6.0 or Search Engine Friendly URLs by vBSEO 3.6.1 .

[PLODDITHANLEY]

Your password is 2641 days old, and has therefore expired.

Couldn't post had to erase all my messages except 25....

Thanks for your help via IM Mats and AD for unblocking me, it said sending email for confirmation but it didn't - correct address too.

[obpmgmua]

Seriously why would anyone wanna hack this site? We're just a small community in our own corner of the internet talking about a game we all like. It's akin to somebody eavesdropping on old church ladies.

[agus92]

Originally Posted by obpmgmua

Seriously why would anyone wanna hack this site? We're just a small community in our own corner of the internet talking about a game we all like. It's akin to somebody eavesdropping on old church ladies.

Love the comparison.

Well, TBH, there are some butthurts about the depiction of insurgent forces.

[Spook]

People don't give a shit about the content of this forums, all they care are the user dumbs with emails and passwords which they can sell. And this forums user database isn't small.

[INVIS]

thanks for the info
using a disposable mail address myself, very thankful for those services.

[erikkir]