Why the silence?

[motorhaven]

Originally Posted by Max Taxable

Post #70 was edited by Paul, a post of mine was deleted....

You never answered my questions. Have you bought their "patch?" If not, why are you promoting it?

No, I bought nothing from them. Not once have I promoted anything, where in the world did you get that from?

I posted here because the hack was mentioned on another site, Paul M. knew about it there, and yet even after this there was silence from VB com/org. I posted to bring it to light, in part because the last time VB stalled on getting the word out about hacks thousands of VBulletin based sites got hacked.

Paul M. acknowledged the hackers gained access to vb.org's database. That makes you wrong.

[Paul M]

Enough of the bickering, this is not the school playground.

I have made it quite clear what is known.
If you have genuine, sensible, questions to ask, or things to say you are are welcome, any more childish arguments and untruths will be removed.

[TheLastSuperman]

Originally Posted by motorhaven

Welcome to I was right.

Had you followed all the resources out there about it you'd have seen there was than just screen shots. But you and others were too busy looking to defend VB rather than following and reading everything at the resources, such as the long thread over at Mac Rumors where there was plenty of info.

The right thing was not IB employees initially taking the Baghdad Bob role.

No you were not right, mistaken possibly... while assuming too much it seems.

Originally Posted by motorhaven

The screen shots the script kiddie provided show the VB.org database in the list.

Well now a plain run of the mill fashion script kiddie could not do this, it was someone w/ knowledge and expertise enough to know where to look and what to look for and how to "dig" for it.

Originally Posted by motorhaven

Which one is a fact? A single server was hacked as you claim, or servers as the notice from VBulletin claims? Just curious, since my post about others being wrong was considered enough nonsense to remove, but not those calling me paranoid, a conspiracy nut, or any of the others slamming me. Hardly seems impartial.

The reason why is your spreading rumors and paranoia around like wildfire which is causing panic if nothing else. Paul said a QA server was hacked, it had around 100 variations of old installs/database copies on it for testing purposes so therefor it was best for vbulletin.com and vbulletin.org to have us all change our passwords.

Until we all know more lets try and be civil, sorry if I came across wrong initially motorhaven but my points are still valid i.e. you only know of this because of what you've read and you're not Paul nor anyone else on staff at vbulletin.com so you didn't know "for sure" at time of posting.

[Simon Lloyd]

I changed my password here almost immediately (better safe than sorry!) yet when I logged in today I get told my password is more than 100 days old??

Is this normal behaviour Paul with this version of vb when password change is forced?

Last question, did or could the hacker have gotten our customer numbers and license numbers?

[TNCclubman]

in canada we have laws where companies must immediately disclose they got hacked. Do you guys not have that down there in the states? seems like people are scared to put out an official declaration of what happened that can be verified by an audit by law punishable by jail or fines if lieing.

[motorhaven]

Originally Posted by TNCclubman

in canada we have laws where companies must immediately disclose they got hacked. Do you guys not have that down there in the states? seems like people are scared to put out an official declaration of what happened that can be verified by an audit by law punishable by jail or fines if lieing.

Many states have disclosure laws. California, where IB is based, does: SB 1386

[Digital Jedi]

Originally Posted by motorhaven

Welcome to I was right.

Dude, you were epically wrong. All you knew was what they said. And what they said turned out to (surprise) not be entirely true. You even had the order of events all wrong.

Originally Posted by motorhaven

Many states have disclosure laws. California, where IB is based, does: SB 1386

Here's the thing. You found out about it the same day vB found out about it. Then asked why the silence. You didn't even give them a day to do basic research to find out if it was even true or actionable. This is why you got jumped on by the rest of us. We like a little proof with our outrage. And low-fat creamer.

[DoubleGlasses]

So I have a question - is your account on vbulletin.com the same as your account on vbulletin.com/forum?

Because now I"m not even sure I have an account on vbulletin.com/forum - especially since I can't retrieve it...

[AndrewSimm]

Originally Posted by DoubleGlasses

So I have a question - is your account on vbulletin.com the same as your account on vbulletin.com/forum?

Because now I"m not even sure I have an account on vbulletin.com/forum - especially since I can't retrieve it...

no it is different and I would assume in a different database all together, but I don't know about the last part.

[Digital Jedi]

Originally Posted by DoubleGlasses

So I have a question - is your account on vbulletin.com the same as your account on vbulletin.com/forum?

Because now I"m not even sure I have an account on vbulletin.com/forum - especially since I can't retrieve it...

Paul already clarified this earlier in the thread.

Originally Posted by Paul M

Not really sure what financial information you mean.

All the log files that were examined do not show any attemped access of customer data in the support system, they basically targeted the vb user table.

So, no. They're two different accounts.