passwords.. and downgrading

[king sting]

yeah i read on vbulletin.org that viewing users passwords were only a option on verisons below the 2.0.0 verison of vb.. It never hit me before.. but I think that would be great option to have, and I now consider it a must. I mean I paid a good deal of money to have vbulletin, I think I should beable to have total contorl of it. Plus a number of other reasons.. but if this is the case.. I want to know how to down grade my vbulletin to a verison that has this feature.

[Scott MacVicar]

Unfortunately you can't downgrade once you have upgraded as the encrypted passwords are now stored instead of the un-encrypted ones.

This was done mainly as a security purpose, to stop people gaining yoru password if the database fell into the hands of some corrupt person. Most users will be glad to know that there passwords are encrypted as many will use the same password for everything

[Conscience]

Originally posted by PPN
Unfortunately you can't downgrade once you have upgraded as the encrypted passwords are now stored instead of the un-encrypted ones.

This was done mainly as a security purpose, to stop people gaining yoru password if the database fell into the hands of some corrupt person. Most users will be glad to know that there passwords are encrypted as many will use the same password for everything

I 100% agree. I post on MANY vbulletin boards and until the passwords were crypted i had to use different passwords for all of them. Now I just use one password b/c I know other administrators can't look up my password and then use it to gain access to my forums.

Personally i have never been without the feature on my board, when it wasn't included in the earlier versions I hacked it in anyway.

In todays security climate, crypted passwords are a must.

[king sting]

like I said on vbulletin.org.. I think this is ****ing bull****. I paid for a software. I should have total control of it. vbulletin shouldnt be trying to tell me how to run my board. This is nothing more then censership, like the US government. I want this feature taken out of my vbulletin software asap. I mean what the ****? I paid out a lot of money to run this msg board, and I don't want to be told how to run it.

[ccd1]

Originally posted by king sting
like I said on vbulletin.org.. I think this is ****ing bull****. I paid for a software. I should have total control of it. vbulletin shouldnt be trying to tell me how to run my board. This is nothing more then censership, like the US government. I want this feature taken out of my vbulletin software asap. I mean what the ****? I paid out a lot of money to run this msg board, and I don't want to be told how to run it.

You bought a certain product that was released as it is. You cannot go out and buy a Toyota and say it's all bull**** because it doesn't have a built in TV like a Honda.

If you wanted the TV, you should have bought the Honda.

[JamesUS]

Originally posted by king sting
like I said on vbulletin.org.. I think this is ****ing bull****. I paid for a software. I should have total control of it. vbulletin shouldnt be trying to tell me how to run my board. This is nothing more then censership, like the US government. I want this feature taken out of my vbulletin software asap. I mean what the ****? I paid out a lot of money to run this msg board, and I don't want to be told how to run it.

I'm sorry if you don't like the way our product operates.

However, when you purchased vBulletin, at no time did we advertise a 'password viewing' feature. If you'd have asked us before purchasing, then we would have told you that password viewing is not included as a feature in vBulletin.

We're not trying to tell you how to run your board. We're simply making a decision based on all of our customers' opinions as to which features to include and not to include. There were many many more people in favor of having encrypted passwords than viewable passwords, so we chose the former. In fact, prior to vBulletin 2.2, when this feature was implemented, one-way password encryption was one of the most requested features.

If you want to change this on your own board, you need to hack in this functionality yourself - see vBulletin.org. However, any users who have registered so far have permanently encrypted passwords and there is no way to recover these.

[king sting]

On vbulletin.org they're actting hella stupid and don't want to give anyone the hack. Plus what good is it if all the passwords in my database are gone?

When I borught vbulletin it didn't cross my mind to ask "oh hey can i view passwords".. what the ****.. like thats a feature? Thats something you dont even think you need to think about. So now its not in vbulletin cuz some idiots requested it? Well it shouldnt be in they're vbulletin. But I want it in mine. It should just be a ****ing option to select. **** man. I can't believe this ****. I got ripped off by another corperation like Enron. Over a hundred dollars and your going to censer my freedoms? Assumeing I'm a evil ass mutha ****a and gonna use peoples passwords? **** that.

And to the moron talking about cars.. Toyota offers everything from a TV to a ****ing DVD player for most of there cars. Features can be added and taken off as the custmer chooses! Same with Honda. If this is the case, and its your example, the feature to view passwords should be put into place as the custmer chooses, dumb ****.

to the vbulletin heads.. fix this ****. I can't believe you people. How do i get a refund then? I feel I was ripped the **** off. I think vbulletin is good msg board software, but when you people try to censer me, **** that and **** you.

also I want to know why i can't run a older verison of vbulletin then? and why it wont let me down grade to run the **** I feel i want to run.

[ccd1]

It's because of that attitude you're not getting any help. You cannot erase a standard feature like this one. One way encryption is becoming very main stream with large sites (and vBulletin is advertised for medium to large sites). Yahoo, ebay, amazon all use this technology because it is the safest way to ensure their customers protection. There is no use whatsoever for you to have access to those passwords and all they do is create a huge security risk.

Latest version is 2.2.7, all other versions are discarded beause they include security issues and bugs that have been fixed. Do you really want buggy software that's not even compatible with the latest version of PHP and mySQL?

[Scott MacVicar]

king sting, may i remind you that you do not have a right to view these forums and most follow the forum rules. Please try to refrain from swearing and talking to anyone in a derogatory manor.

The hashed passwords were put there as a feature to protect users, you say you dont intend to use the password in any sort of evil way, then why is it so important to view peoples passwords. Most people will feel secure that there passwords are protected from anyone who may gain access to the database.

If you put something on your site like "Admins can view all passwords" this wont encourage users to register. We are not censoring it is simply a feature.

I'd love to see you find a forum which doesnt use any sort of encryption or hasing techniques. UBB.threads, IBForums, YaBB SE, Gossamer Threads and phpBB all use password encryption

[king sting]

like I said.. how do I get a refund?

and now you want to bann me from these forums just because I have a complaint?

I don't care about yahoo, or any other mainstream site. What they do is there business.

And what i do is my business. And vbulletin shouldn't be censering my right to do whatever I want with a software I paid for.

And yes, I want an old buggy verison of vb, if it will do what I want it to do.

[Conscience]

Originally posted by king sting
like I said.. how do I get a refund?

and now you want to bann me from these forums just because I have a complaint?

I don't care about yahoo, or any other mainstream site. What they do is there business.

And what i do is my business. And vbulletin shouldn't be censering my right to do whatever I want with a software I paid for.

And yes, I want an old buggy verison of vb, if it will do what I want it to do.

You were being abusive, thats why ppn warned you about breaking forum rules.

[king sting]

Originally posted by Conscience
You were being abusive, thats why ppn warned you about breaking forum rules.

look guy.. i'm just telling it like it is.

Even if I want user passwords for evil doings.. who is the vb staff to tell me different? I paid for this software. That means I own it right. Then I should beable to use it as I want to, without censership put in effect by the vb heads.

[Conscience]

Originally posted by king sting
look guy.. i'm just telling it like it is.

Even if I want user passwords for evil doings.. who is the vb staff to tell me different? I paid for this software. That means I own it right. Then I should beable to use it as I want to, without censership put in effect by the vb heads.

Can you use it they way you want to by hacking it out yourself - they ain't stopping you doing that.

The product comes with encryption, this is not for censorship this is for SECURITY.

[Scott MacVicar]

You seem to have some serious issues, contact sales@vbulletin.com and we will see if you can be sorted out with a refund.

Censor: A person authorized to examine books, films, or other material and to remove or suppress what is considered morally, politically, or otherwise objectionable.

This is purely for security reasons, we're simply wanting to make sure that our product is secure. If you wish an older version then you can sit and watch your board be hacked every 10 minutes.

My mentioning of other forums was that they all encrypt their passwords too, you will have a hard time finding one that doesnt have encryption.

[king sting]

Originally posted by PPN
You seem to have some serious issues, contact sales@vbulletin.com and we will see if you can be sorted out with a refund.



ok so now you try and make fun of me? just because I have a complaint against corperate america vb?

Can you use it they way you want to by hacking it out yourself - they ain't stopping you doing that.


man thats all i wanted in the first place. i went to vbulltin.org looking for it. but they were talking about that it can not be done because vb has m5 or something tech. I dunno. But they said it cant be done. So I came here asking about it and everyone jumps my case for wanting that feature. Which in my opinion isnt a feature, its standerd.

As for the refund, yea i'll contact them, and complain about you also. I'd really just like the hack to view passwords... you make a big deal about this, and lost a customer in the process, plus I will never ever tell anyone about this software, and if I ever see someone promote it I will tell em how bad the custmer support is.

Why is this such a big deal? Its my board. if I want the passwords that my business.

[Conscience]

Anything can be done, but they are right, it would be a huge job and you couldn't recover any of the passwords of users already signed up to your board because md5 (the encryption standard vB is using) is non-reversable. If it is this hard to hack imagine how hard it would be to make it an option in the adminCP!

And dude, no one "jumped on your case", people were just explaining why the majority of people wanted encrypted passwords. And PPN was most definatly not making fun of you. The world isn't out to get you man...

I really sorry you feel this way about vB, because in my opinion it would have to be the best board, in terms of software and customer service around - and ive used a lot of em.

[Scott MacVicar]

I feel I have been fair in answering all of your questions, if you have a complaint against me feel free to voice it to john@vbulletin.com

The md5 option is there because it provides additional security, we're not trying to censor you in anyway or stop you from running a board. We've not hidden it and its a standard feature on all forums now not just vBulletin.
It would be too hard to create an option due to the one way hashing method used with encrypting of the passwords. As stated by many members you have to post at vBulletin.org with any questions involving the modification of the files. Many users will not help as they believe it is an invasion of privacy.

I hope this has answered all your questions.

[tubedogg]

Originally posted by king sting
like I said on vbulletin.org.. I think this is ****ing bull****. I paid for a software. I should have total control of it. vbulletin shouldnt be trying to tell me how to run my board. This is nothing more then censership, like the US government. I want this feature taken out of my vbulletin software asap. I mean what the ****? I paid out a lot of money to run this msg board, and I don't want to be told how to run it.Feel free to remove the password encryption code if you wish. No one is stopping you, and you don't need our permission to remove it. We don't perform custom coding though (so we won't be removing it from your copy of vB), and the place to discuss such matters is vbulletin.org, not here. You have total control of it, and the control to remove the code that seems to offend you so badly.
The software can only ship one way, and the way we have chosen to make it is with encrypted passwords. Sorry if you don't like this, but as I said above no one is stopping you from changing your vB if you want.
I would also suggest you look up censorship in a dictionary. Not having a feature the way you want it could in no possible way be construed as censorship, since one has nothing to do with the other.

[CeleronXT]

Ooh, do Hondas have TVs now? Sweet. :)

Anyway, the only reason you would need their password is if you were planning on using it to attempt to gain access to their servers, email accounts, computers, their accounts on other forums, etc. I believe that this is also one of the reasons encryption was added.

[ccd1]

Originally posted by CeleronXT
Ooh, do Hondas have TVs now? Sweet. :)


Most cars in Japan (Even the cheap models) come with a navigation screen that can be switched to TV mode. Dangerous while driving fast but in metropolitan areas, there's always traffic.

'Corporate America vB'. 'Enron'. Sounds almost like a child repeating things he would hear his parents say, or a TV without fully understanding.

I feel this thread has gone sour, maybe it should be closed?

[tubedogg]

Not a bad idea.

king sting, if you wish to pursue a refund, please email sales@vbulletin.com. Otherwise, this discussion is closed - we will not be removing password encryption, and the place to discuss code modifications is vbulletin.org.