We never give details to anyone else then the coder.
Odd policy MARCO - it seems like the details of said exploit would be of concern to those of us who have actually installed modifications... Perhaps you'd consider a policy change in the direction of disclosure to the Community
Quote:
Originally Posted by Jase2
Sorry guys.
I'm waiting for Paul come online, as he's the only one who can see what information has been posted by vb.org staff.
However, we will have HelpCenter patched up asap. All this hard work isn't for nothing, you know.
If vb.org emailed/private messaged me the information, then I could have it patched up. Unfortunately, they won't.
I hear ya JASE - I know YAWL've put an incredible amount of work into making HelpCenter a success and I thank you for that and will look forward to the updated, exploit-free version. I suppose it's Monday and Monday doesn't roll around without its usual drama in some way or other - Anyway... Good luck with it
Oh! Allrighty then - I thought perhaps something major was amiss... That email I received was like QUARANTINE in big bold letters and I'm like OH MY GOD! WHAT IS IT? LOL --- So good to know it's something minor. Sounds good then!
Odd policy MARCO - it seems like the details of said exploit would be of concern to those of us who have actually installed modifications... Perhaps you'd consider a policy change in the direction of disclosure to the Community
The policy is in place so that someone who wants to exploit a modification cannot find out easily. They would need to find the exploit themselves. And I would probably have a safe bet saying it won't change in the future.
The policy is in place so that someone who wants to exploit a modification cannot find out easily. They would need to find the exploit themselves. And I would probably have a safe bet saying it won't change in the future.
LOL - no doubt vBulletin.org doesn't change it's policy very often
As I've installed the modification though - it would have been nice to know what the exploit was - but I thank JASE for the answer...