password needs to be reset
Collapse
This topic is closed.
X
X
-
-
But the attackers did have access correct? Whether they used the access or not is not being questioned.ManagerJosh, Owner of 4 XenForo Licenses, 1 vBulletin Legacy License, 1 Internet Brands Suite License
Director, WorldSims.org | Gaming Hosting Administrator, SimGames.net, Urban Online EntertainmentComment
-
@vBulletin team, **** happens. Thanks for the fast response and fast informing everybody.
@the rest, the best thing everybody here can do is go home and keep an eye on your vBulletin board. Keep the board, server very up to date with patches. Also make sure you change your admin password on your own site too!! Maybe also on all the websites where you used the same email address as you used here.Comment
-
Mind to explain why we didn't get an email about that? Why did I have to get this information here: http://www.heise.de/security/meldung...m-2048182.html ...instead of recieving information from you? Do you expect every user to login here every few days and to see that notice when logging in? Really?
By the way, where is the thumbs-down smiley? Didn't expect that it would be needed one day?Comment
-
Mind to explain why we didn't get an email about that? Why did I have to get this information here: http://www.heise.de/security/meldung...m-2048182.html ...instead of recieving information from you? Do you expect every user to login here every few days and to see that notice when logging in? Really?
By the way, where is the thumbs-down smiley? Didn't expect that it would be needed one day?Comment
-
Mind to explain why we didn't get an email about that? Why did I have to get this information here: http://www.heise.de/security/meldung...m-2048182.html ...instead of recieving information from you? Do you expect every user to login here every few days and to see that notice when logging in? Really?
By the way, where is the thumbs-down smiley? Didn't expect that it would be needed one day?Translations provided by Google.
Wayne Luke
The Rabid Badger - a vBulletin Cloud demonstration site.
vBulletin 5 APIComment
-
Emails were sent to all valid customer emails on Saturday for both vBulletin.com and vBulletin.org. If you did not receive the email, you should verify that your customer account has a valid and properly working email. You should also add vbulletin.com to your white list of email addresses.
These hackers were able to compromise an insecure system that was used for testing vBulletin mobile applications. The best defense against potential compromises is to keep your system running on the very latest patch release of the software.
Systems can have bugs, I accept that as normal. And beyond a doubt you have to have test systems setup. But what you do NOT have to do is put real live information on those systems. Spend 10 minutes and write a script that generates a million users all with BS information if you want a large user base.
Comment
-
Were our license security questions accessible?ManagerJosh, Owner of 4 XenForo Licenses, 1 vBulletin Legacy License, 1 Internet Brands Suite License
Director, WorldSims.org | Gaming Hosting Administrator, SimGames.net, Urban Online Entertainment👍 1Comment
-
Translations provided by Google.
Wayne Luke
The Rabid Badger - a vBulletin Cloud demonstration site.
vBulletin 5 APIComment
-
Wayne, Whether they were viewed is one question. Whether they were potentially accessible by the attackers is another.
Therefore let me rephrase my questions .
With the level of access the attackers had, were our security questions accessible? Were they viewed?
ManagerJosh, Owner of 4 XenForo Licenses, 1 vBulletin Legacy License, 1 Internet Brands Suite License
Director, WorldSims.org | Gaming Hosting Administrator, SimGames.net, Urban Online EntertainmentComment
-
For people whos getting a message to change the password more than once: I too changed my password and was prompted to change it again. It's a caching problem. CTRL+F5 fixes it.👍 1Comment
-
The IT people are still reviewing various logs and other items to determine what we can say for certain they read.
If logs say they accessed something, then we know they did, if logs dont say it, then all we can say is they could have, but we cant confirm it.
Baby, I was born this way👍 1Comment
Related Topics
Collapse
-
by elindoSo I need to change the administrator password and my cpanel password again.
What would happen to the VBulletin website or settings if I change my admin password? I know somewhere during...-
Channel: Support Issues & Questions
-
Comment