Forum Update: Help Us Help You!

[rdprdp01]

On May 28, our friends at MyBB sent a bright flare into the evening sky. MyBB has been gathering information from Forum Administrators and identified 18 security vulnerabilities that despicable hackers with too much time on their hands could exploit. The three most serious vulnerabilities could have allowed bad actors to inject malicious code into your browser through the buddy list or user profile settings, or in a worst-case scenario, gain control of the Forum's server. Cormanus, pdedse, and I were aware of those vulnerabilities and took appropriate measures to plug the holes, but the Developers at MyBB, all volunteers, created a proper fix for all vulnerabilities and rolled out a new MyBB release. Their place in Developer Heaven is assured.

We installed that release last night, and so far, things appear to be stable.

There were also 31 minor functional issues resolved in this release. Our Forum should run even nicer than what it has been with these minor issues addressed.

Because of the severity of the exposure and our concerns about using duct tape and Bondo to keep things together, we took a leap of faith and installed the update with very little testing. To be candid, no testing.

So far, all performance indicators suggest the Forum is stable and working well. However, if you encounter something odd or if something fails to operate as it should, do not assume it is you. Rather, I caused it by pushing out the release without testing! Document anything that I broke in this Thread. We will get about the business of fixing it as quickly as we can. If we are good, we will be delighted. Thanks in advance for the assist.

For those programming nerds of the Forum, you can read about the release here.

Thank you all for continuing to log in, post, and share insights. It has been a few days since we heard something from Lord Popgun. Be advised that I have arranged for his handsome face to appear on milk cartons across the Lower 48 and Canada. An Amber Alert will follow soon. We do look forward to his next post. Polish up those RLETs. David

[Cormanus]

Thanks, rdprdp01 for attending to all this.

[Gone in 60]

Thank you for your vigilance in keeping our community safe and together.
So far, I have not received anything more than the usual number of phishing attempts, so all good.

[Mtneers]

Thank goodness you are around to monitor this forum!

[Nachodaddy]

Thank you. All this is way over my thick and ancient head, so your efforts are greatly appreciated, as well as the tireless efforts of the folk at MyBB.