Unable to Register via phone

[Zachery]

sorry if a dumb question, but will the fix for this likely require customers updating the API files on server, recompiling app, or both? or unknown at this point?

In this specific case, I think its an API thing, I might be wrong.

[6impy]

In this specific case, I think its an API thing, I might be wrong.

Yeah, unless they plan on adding CAPTCHA and other support into the app, then they are going to have to update the API to allow human verification bypassed registration .

[m0rgulvale]

would it be able to be abused by spammers though? for example, could a bot try and crack the API key (by brute force), and then register without any verification? perhaps making the API key longer would be needed if doing that?

[Zachery]

218,340,105,584,896 combinations for the api key, brute forcing is kinda out.

[m0rgulvale]

could spammers download the app, decompile it, get the key? although unlikely is that feasible?

[worried]

could spammers download the app, decompile it, get the key? although unlikely is that feasible?

Seems like a lot of work just to spam one site.

[m0rgulvale]

agreed, just wondering if it is feasible. It would be really bad though of someone got that info and sold it to other spammers. Ideally I think the image verification is still needed.

[6impy]

The issue has been FIXED!

All you have to do is add one line of code to an API plugin.

See: http://tracker.vbulletin.com/browse/...#action_113597

[mrderanged]

seems to have fixed it for me as well

[worried]

Is this problem for the iPhone? I have reCAPTCHA enabled and I'm able to register on the iPhone app ver 1.0.1.

[Zachery]

Its an issue for the vB3 api.

[SteveLV702]

and vB4.... remember I am the one that originally reported this issue in this thread and I am running version 4.1.3

[m0rgulvale]

thx for quick attention to this, dev team and vb.

when will an official update to the API to available (e.g. new version number and download ability in the members area)? i want to avoid patching individual lines of code and going with the regular update cycle.