[Digital Jedi]

Originally Posted by Max Taxable

I am sticking with version 3 until they pry it out of my cold, dead hands. DJ says there's nothing really wrong with version 4, but of all vBulletin versions ever, it is by far the worst on security - it's getting hacked all the time, and with new exploits popping up all the time. I believe it is inherently flawed. vB4 is the devil.

To that point, I think all the hacking that's been going on lately has been a little misleading. It's a mistake to think something's more secure only because it hasn't been hacked a lot lately. vB3 probably has more security vulnerabilities than vB4. It's unsupported, older software that is no longer being patched or developed. That, in of itself, is going to be one of the problems admin experience in the coming years. But it's not a popular target. There are still fewer vB3 boards out than the combined vB4 and 5 boards. Their going to look for the more common vulnerability. The one that will get them into the most sites. The one that will do the most damage. (Which is why WordPress and Joomla are the most hacked scripts out there right now.) vB3 just isn't interesting right now to them, but that doesn't mean it's more secure. Logically, nothing is more secure once development stops. Liken it to anyone trying to use Netscape to browse the web today. You probably won't run into a lot of people targeting Netscape. But you'd be taking a huge risk using it as your main browser. vB3 is not to that point yet. But it will be. And in not too short a time.