MyBB Security Forum Suggestion

[jswebco]

+1

Would prove useful and will definitely help keep blaming on MyBB to a minimum.

[Tim B.]

For the record I think this is a pretty good idea. I'll discuss it with the team when I'm not so busy.

Edit: It looks like we already decided to add this to coincide with 1.6.5 (I just saw Tom's post on the first page which reminded me ).

[LeeUk]

I think this would be a very good addition to the forum, why not have somewhere that we can discuss how to protect our forums in greater detail.

Of course it would need to be closed off to guests unlike the rest of the sections. But, yes it's a good idea. I back this 100% and can see it proving very successful.

[Alex Smith]

Of course it would need to be closed off to guests unlike the rest of the sections.

Why would they hide ways of making your forum more secure?

[pavemen]

Of course it would need to be closed off to guests unlike the rest of the sections.

Why would they hide ways of making your forum more secure?

Perhaps the thought was to keep such topics about vulnerabilities, what sites were hacked, etc from ending up in search engines and things like that?

[LeeUk]

Of course it would need to be closed off to guests unlike the rest of the sections.

Why would they hide ways of making your forum more secure?

I said to close it to guests as in non registered members, meaning if someone was here to find vulnerable exploits, they would not access the new section discussing about how to protect the forums.

Cheers

-Lee

---

Of course it would need to be closed off to guests unlike the rest of the sections.

Why would they hide ways of making your forum more secure?

Perhaps the thought was to keep such topics about vulnerabilities, what sites were hacked, etc from ending up in search engines and things like that?

Exactly.

[Lo.]

I don't think we would be allowed to say how vulnerbilities were done easy enough. Leave that to HF.

[Tom K.]

^ good point aristotle & labrocca ! Though I wonder why it wasn't immediately patched?

Because it wasn't immediately obvious the release was corrupted. There was some time between the release, and the first reports of the code

[Dylan M.]

^ good point aristotle & labrocca ! Though I wonder why it wasn't immediately patched?

Because it wasn't immediately obvious the release was corrupted. There was some time between the release, and the first reports of the code

There was also some time between the release and the compromise.

[pyridine]

We agreed in our meeting at the beginning of October that there would be a new forum. It will be available alongside the release of MyBB 1.6.5.

Bump.