[Request] Video Directory Quarantine Info

[JacquiiDesigns]

Originally Posted by TheLastSuperman

The policy does not need attention, in the least. Remember all, I was once once of you, I voiced the same concerns in fact if you search my past posts you'll find me spouting off to Paul and others long ago... it sounded like the same gibberish you typed above no offense but the forcing someone into doing something over being loud, proud, and funny when calling them or the sites policies into question is my JOB Ooooootay? Also - we're both loud Jacqii and nothings wrong with that unless its Movie night . See I'm still being funny while also beating a dead horse, policy won't change but we can surely poke and prod that poor dead horse until the cows come home, pigs fly, or the thread is closed and I'm pretty sure which one will happen first! "How Now Brown Cow"

Edit: Info to those who already downloaded or installed it? What about the 1000x illegal/hacker/download 599 vb4 Mods in this .zip type of sites? Remember that most mods are available illegally and perhaps with tons of injected code or similar in the files so we can't just trust anyone #X-Files.

Now corny humor aside, I feel your pain. I also hate the fact when some coders remove their mods (over spite or similar, while nothing is wrong with the mod at all) and I fix tons of hacked sites... my method is restore the site to how it was 100% then upgrade if required - issue comes into play when the mod is in the graveyard and I can't download to help "fix" their site back to original so if you hate just being sol, then try just being sh**ted on eh? Basically what some have done in the past yet we don't see threads about that and those mods broke the mold for sure, some of them. So we can all have our opinions and justify why something should or should not be done but the rules are the rules, I've argued with Paul before and he politely pointed out many oversights in my logic and they just made sense once I took his point of view into consideration. See my post above, if its within your budget many coders here are qualified to change a few lines of coding to make it secure again - this is why we have an unpaid + paid request area for you to utilize. Furthermore you could open a new thread in vB4 programming discussions and ask for advice or what others might see as a vulnerability.

*Do not forget though, that a coder can fix a mod then contact staff and if we review and confirm its fixed we can add the fixed mod as an attachment to the first post, the liability IF any at all then does not fall on the new coder nor the original author, it would then fall on you the person downloading and using as it would still be use as-is and at your own risk we would simply verify if a security risk is still present or not. Some coders also fix a mod and attach the fixed file to the mods thread so it stays within the thread and does not violate the do not re-release this mod blah blah as its still within the mods thread here - since its quarantined now and not a misc issue i.e. its a security issue the only way to go about it that way would be to contact staff directly and voice interest in fixing said mod so we can work with you then restore the mod with the fixed version in place ready for download.

I didn't realize posting a suggestion would get me insulted by vB.org staff. And you guys wonder why member activity has slowed to a tedious trickle here..

The policy does need to be revisited in my opinion, and likely in the opinions of lots of folks left out in the dark as concerns quarantined modifications. It could and should be bettered for legitimate vBulletin license holders. And to be perfectly honest - I can't be bothered to give a damn about folks using illegally shared modifications with their nulled software. That's immaterial here.

What's important here is the 706 people who've legitimately marked "Install" on the modification - who are now (by vB.org official policy) sh!t out of luck, no useful information whatsoever coming out of vB.org

Originally Posted by TheLastSuperman

See my post above, if its within your budget many coders here are qualified to change a few lines of coding to make it secure again - this is why we have an unpaid + paid request area for you to utilize. Furthermore you could open a new thread in vB4 programming discussions and ask for advice or what others might see as a vulnerability.

1. Who has a budget???? We're broke LOL
2. So we can open a thread and discuss the possible exploits and possible fixes to our little hearts content? Meh. If the exploit truth is going to come out this way - you may as well make it easier so that the 706 people who (again) legitimately marked the modification as installed.

Meanwhile in reality = The 706 folks you shot the useless quarantine subscription email to are SOL.. That's extremely frustrating.
vB.org can do better.

J.

[TheLastSuperman]

Insulted?!?!?!?!

Come now Jacquii, your sense of humor is greater than that I know from experience! It was supposed to make that intellect of yours go "well that snazzy terd, look what he did there" in a sense - he basically said that once, he said the same thing like gibberish, was supposed to be witty humor, I tried!

Tone, the only thing missing on a forum!

Ohh and remember that certain things are not useless, such as the quarantine email - now you/them have the choice to make a decision on whether to disable or remove it until something viable whether that be a fix or replacement comes along. Staff here also does everything on this site, in their spare time Paul and Lynne included... even if they're on staff for vBulletin themselves they ARE NOT PAID for time spent on vbulletin.org so please don't assume that we're responsible for breaking the bank, we're just investors as well and the tedious trickle, vB5 for sure .

[JacquiiDesigns]

Originally Posted by TheLastSuperman

Insulted?!?!?!?!

Come now Jacquii, your sense of humor is greater than that I know from experience!

Nothing wrong with a wee bit of melodrama :P

Originally Posted by TheLastSuperman

Ohh and remember that certain things are not useless, such as the quarantine email - now you/them have the choice to make a decision on whether to disable or remove it until something viable whether that be a fix or replacement comes along. Staff here also does everything on this site, in their spare time Paul and Lynne included... even if they're on staff for vBulletin themselves they ARE NOT PAID for time spent on vbulletin.org so please don't assume that we're responsible for breaking the bank, we're just investors as well and the tedious trickle, vB5 for sure .

Ha. I know and well understand. I'm just making some (imo well-deserved) noise and hope it gets your attention. I wouldn't say the things I've said if I didn't think the policy could be bettered... And for most of us - the email is absolutely useless. Other than hiring someone to investigate what the exploit *could be* and hoping that once they've solved the 'what is it' of the Great Exploit Caper ... Meh. I just think a lot of time and a bit of money could be saved if you guys had some sort of transparency. That's all.

Anyway. Yeah. A wee bit of melodrama for your nerves. Hope it made you smile - or more appropriately - I hope it made you roll your eyes like I did once I started wondering what to do about the quarantine LOL

J.

--------------- Added [DATE]1439890217[/DATE] at [TIME]1439890217[/TIME] ---------------

Originally Posted by weave

I am very curious what this would cost to fix AND update. If it is reasonable, I might be willing to foot the bill....worst case is the community pools their funds together and gets a legit coder to fix it up and make it current. I do NOT want to rip it off my site but I have disabled it until I know more about why it was quarantiend.

I am not faulting the ORG at all....I just want it fixed and updated so I can enable it on my site again.....

I'd be interested in the cost and possibly slinging a few dollars to the cause. It's a nice modification that I've appreciated for years. I hate that there's an exploit - but I hate even more that there's an exploit and we apparently have not even clue #1 as to where even begin to address it ... other than hiring a coder. At anyrate - I'm the brokest Bytch in the great state of Tennessee - but I could throw a tiny amount to the cause.

J.

[TheLastSuperman]

World wouldn't be quite the same without a few "characters" in it, now would it?! Character - love that word and its uses! All of you have it and we're all quite a character as well I'd dare say, in that good type of way!

I would contact Blind-Eddie who posted above, looks as if he has a paid request up already and perhaps you all could split that, something you would need to contact him over though.

[TheLastSuperman]

Originally Posted by weave

I am very curious what this would cost to fix AND update. If it is reasonable, I might be willing to foot the bill....worst case is the community pools their funds together and gets a legit coder to fix it up and make it current. I do NOT want to rip it off my site but I have disabled it until I know more about why it was quarantiend.

I am not faulting the ORG at all....I just want it fixed and updated so I can enable it on my site again.....

Never uninstall, disable and rename all .php file i.e. video.php to .gthdhyu675r5.php and leave it until time to patch/update. I say this because then those looking for specific files to take advantage of won't find them right away and those not talented enough won't. Furthermore if you remove the mod then all data associated with it goes as well, so with that being said if someone didn't know and uninstalled thinking that was correct, then re-installed once it was patched/fixed and wondered where all their videos links and such went too - they're gone forever! This is why you disable+rename instead of uninstall.

[weave]

Originally Posted by TheLastSuperman

Never uninstall, disable and rename all .php file i.e. video.php to .gthdhyu675r5.php and leave it until time to patch/update. I say this because then those looking for specific files to take advantage of won't find them right away and those not talented enough won't. Furthermore if you remove the mod then all data associated with it goes as well, so with that being said if someone didn't know and uninstalled thinking that was correct, then re-installed once it was patched/fixed and wondered where all their videos links and such went too - they're gone forever! This is why you disable+rename instead of uninstall.

Yea I get that an uninstall is the last draconian option anyone wants and fully understand the ramifications of doing so. However, as I said my original post, the developer is long gone and none of the rest of us have a clue as to what the exploit is (and you ain't talking). That leaves us with the disable and now your recent inclusion of renaming every *.php file, of which I count 31 one of.

The original org user paid to fix the YouTube API 2.0 - 3.0 issue, not the "exploit". How are we to pay to get it fixed when we have no idea WHY you killed it and what needs to be fixed? For all we know this could be a simple syntax issue or a the worst....the need for a whole re-write. That could make the cost $20 or many hundreds, or more!

I find it hard to believe that the 701 one of us who checked that we have it installed actually have any future hopes of seeing this fixed and brought back to life.....but I am a pessimist by nature.

Time will tell I guess but for now I will just embed any youtube videos in posts and carry on.

[blind-eddie]

I created a thread in the paid section and received two pm's with regards fixing it. I am still waiting to hear something.

[rockerzteam]

Originally Posted by blind-eddie

I created a thread in the paid section and received two pm's with regards fixing it. I am still waiting to hear something.

I hope you're not holding your breath while waiting for a response or fix! You would have better luck tracking down the main coder at the other forums and asking him to release a fix to you for a fee! With all the help you provide people Eddie including myself I am amazed how you get treated in return.

[RichieBoy67]

I had to remove this mod and go with Nicks. I have lost a library with many years of media.

I understand the policy of not making a known exploit public knowledge but maybe it could have been shared with at least a few well known and trust worthy members so a fix could have been found.

At any rate this plug wasn't working correctly in a long time.

[weave]

Originally Posted by RichieBoy67

I had to remove this mod and go with Nicks. I have lost a library with many years of media.

I understand the policy of not making a known exploit public knowledge but maybe it could have been shared with at least a few well known and trust worthy members so a fix could have been found.

At any rate this plug wasn't working correctly in a long time.

Was this removed on a VB3 or VB4 site? Other than losing the media, any other ill effects observed?