VB security emails ??

[svoec]

I just thought I might bring up a sugestion --

My forum was recently hacked-- but the hacker didn't do any real damage, (and I backup every night, so no big loss if they had) and I found the problem as soon as i visited the support forum, in a sticky at the top
(Sticky: Got Hacked? Read This! )

I know -- I'm running a old version -- but I've hacked my forum pretty good, and the database is even inegrated into other stuff now, so upgrading would be a nightmare -- on top of that, my users don't accept change very well either...

so -- on to my sugestion -- would it be possible for VB to send out emails to registered users (past and present) when a security hole like this is found. I sure would have appreciated it BEFORE I was hacked...


Thanks

[Steve Machol]

We did send out an email to all license holders. Unfortunately many people don't keep the email address on their licenses up-to-date and many email clients and ISPs are too aggressive in their anti-spamming efforts and often block these emails as spam.

[Floris]

Besides that, the admin control panel lists in the top your current version and the latest version. If it doesn't match it is wise to upgrade to fix bugs and security issues. (Or at least read the announcement for the new version).

[svoec]

Besides that, the admin control panel lists in the top your current version and the latest version. If it doesn't match it is wise to upgrade to fix bugs and security issues. (Or at least read the announcement for the new version).

ok Floris -- did you even read my original post? -- the reasons for not upgrading are plainly listed.
I don't like to sounds like a prick, but if you are going to reply, at least read the post.

Steve -- I know a lot of people aren't going to get the email, but putting forth the effort to send an email, and giving users another reason to keep their email info current is a good thing IMHO. I think it would look like a proactive step on VB's part.

I'm just offering sugestions. I don't see a down side to this one, but maybe I'm not looking from all the sides of it

[conqsoft]

ok Floris -- did you even read my original post? -- the reasons for not upgrading are plainly listed.

I don't like to sounds like a prick, but if you are going to reply, at least read the post.

You should still upgrade to the latest version for security reasons, as Floris suggested. Being too lazy to reinstall your hacks/get it back looking like it does today, isn't a good excuse...

[svoec]

Being too lazy to reinstall your hacks/get it back looking like it does today, isn't a good excuse...

LAZY -- whatever

Running a car-club site, do you have any idea how much trouble non-technical users (99%) will have with a change to vb3 --

[conqsoft]

Who said anything about vb3? The latest version of vb2 has the security fixes.

[conqsoft]

Your site doesn't look very hacked anyway.

[svoec]

Your site doesn't look very hacked anyway.

I give up -- another non-reader --

Steve-- My hat is off to ya (as always) for being profesional and reading the post. take it for what is was worth -- just a sugestion.

thanks --

[conqsoft]

I know -- I'm running a old version -- but I've hacked my forum pretty good, and the database is even inegrated into other stuff now, so upgrading would be a nightmare -- on top of that, my users don't accept change very well either...

I read just fine.

You are running an old copy of vb2, that appears to be very stock, ie, not very hacked, even though you say it is.

Either way, slightly hacked or heavily hacked, there are newer versions of vb2 that fix the security issues. You could switch to that, keeping the same look/feel/functionality, without bothering your ~1700 users and their ~20,000 posts.

[Scott MacVicar]

The email was sent within a few days of the problem occuring. We created an announcement and included 5 different patch versions.

We're looking into making changes to the acp code to make any critical updates.

[svoec]

Thanks -- This is the kind of answer I was looking for