Concerned about another quarantine email I received. Does vB.org just not give a damn

[HMBeaty]

Also, you will find in the ToS here:

8. IN NO EVENT SHALL VBULLETIN.ORG BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED

1. WITH THE USE OR PERFORMANCE OF THIS WEB SITE,
2. WITH THE DELAY OR INABILITY TO USE THIS WEB SITE,
3. WITH THE PROVISION OF OR FAILURE TO PROVIDE SERVICES, OR
4. FOR ANY INFORMATION, SOFTWARE, PRODUCTS, SERVICES AND RELATED GRAPHICS OBTAINED THROUGH THIS WEB SITE, OR OTHERWISE ARISING OUT OF THE USE OF THIS WEB SITE, WHETHER BASED ON CONTRACT, TORT, STRICT LIABILITY OR OTHERWISE, EVEN IF VBULLETIN.ORG HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.

[JacquiiDesigns]

I've read the TOS - I understand the concept of cheap motor oil. But at the same time - do you guys seriously think that implementing a system which will ultimately benefit the vB.org Memberbase is a BAD thing? I mean - Seriously?

Again - I will say - I did not post this thread so that we can argue the virtues of "Sorry bud, you're on your own. You've purchased the product. Good luck with the maintenance, especially if you've modified your product..." --- I think we each understand responsibility.

I'm simply suggesting that the .org might implement a simple policy of information share with Members who have installed a product. It's not about liability Redlinemotors - I'm not trying to take Jelsoft to court - are you kidding - can barely afford to pay my electricity bill - What the hell can I do with a lawyers invoice accept to ball it up and toss it in the trash LOL

Meh - maybe it's just a horrible suggestion and just too dang difficult for a community of coders to implement and I just don't realize it? I tell you one thing I do realize though is that I'm a bit peeved at the notion that the current policy is to simply send out an email with absolutely no information in it. IMO it kinda defeats the purpose of sending out the email in the first place. And yes - I do realize that the email itself is infact a courtesy.

All I'm saying is that the system can be bettered. I think Lynne said it can be bettered as well... And for me = bettered in favor of the vB.org Member is aces in my book.

Jacquii.

[Link14716]

If they didn't care, they wouldn't send an email about it and they certainly wouldn't quarantine it.

All the information you need to know is that is contains a security hole large enough to warrant a quarantine and you should disable it until a fix is posted.

[TNCclubman]

Originally Posted by Shelley_c

Suggestion - Extract the uninstall .txt file from the .zip archive and allow members to view this. Not a fully fledged solution if the file didn't come with uninstall instructions but it's something. I'm guessing that a proportion of scripts that have an exploit found within them will have a .txt file within the archive and or/post.

yes, this.

[Wayne Luke]

Originally Posted by Redlinemotorsports

Thats why I ALWAYS keep a copy of the .zip file on my hard drive and on my server in case something like this happens

I do the same. I can't rely on the file being here under any circumstance. The author could just delete it one night while I am sleeping. It has happened in the past so one has to protect themselves. Anyway, I treat each and every download on this site as if it could vaporize the second after I download it.

Also one should consider any quarantine a serious matter and continue running an addon in such a state as a security risk to your site.

[Medtech]

just a thaught on my part, seeing as issues with mods are encouraged to be discussed in threads under the modification, a vulnerability should also be considered an issue as the same. By all rights, it should be shared so others can learn from it as well. and know to not repeat someone else's mistake. I do understand not wanting to share the info so others that see it can exploit it. this is a two way street that has a dead end in both directions. Ultimately we end up with more modifications that are vulnerable because of lack of knowlege.

Like i said, just a thaught. :erm:

[mikey1991]

How about this, in the notification email, saying it's been quarantined, also list the files contained in the quarantined mod, so that the user would be able to fully uninstall it..

So something like this

** DO NOT REPLY TO THIS MESSAGE **

* Quarantine Notification *

The following modification has been 'quarantined' by vBulletin.org.

https://vborg.vbsupport.ru/showthread.php?t=1

The author of the modification has been informed and asked to address the quarantine reason(s), until this is done the modification will remain in the vbulletin.org graveyard.

If you are currently using this modification then you may wish to consider disabling it.
If the modification consists of a product then disabling the product should be all that is required. Do not uninstall the product as this may delete any data associated with it. If the modification also included new files then you may remove (or rename) them.

The files which were included in the quarantined modification were;

mikey.php
admincp/mikey.php
includes/xml/bitfield_mikeyrocks.xml
includes/xml/cpnav_mikeyrocks.xml
product_mikeyisthebest.xml

Once the author has responded to the issues you will be notified that it has been restored.

Thank you,

vBulletin.org Staff

Etc

[JacquiiDesigns]

^ That's actually a very nice idea Mikey
Simple, yet effective and has more information added for the enduser.
I'd also like to see info about why the modification has been quarantined or graveyarded as well.

Jacquii.

includes/xml/bitfield_mikeyrocks.xml?!?!? HAHAHA - too funny

[Dean C]

Originally Posted by JacquiiCooke

I think so too - and that's what my post is about - it's about improving the vB.org community - I think it's a valid suggestion anyway. I wouldn't have posted it again if I didn't think it was an important one - and honestly - I was a bit insulted by Paul's flippant comment. I suppose it's a good thing I do not wear my emotions on my sleeve LOL

Anyway - I do quite hope that the suggestion is just not dismissed as the ranting of Jacquii ((sigh...))

Jacquii.

When you post in such an aggressive manner using words like "hell", no-one will take you seriously Jacquii. Try posting your suggestions in a more polite way and people may listen, although I think you may have already burned most of your bridges here with your actions in the past

[JacquiiDesigns]

Please do not patronize me Dean, though I do appreciate your feedback on the suggestion at hand. And if a group of people such as vB.org Members who I have personally witnessed using stronger words than "hell" are condemning me for doing the same - well - it's not I who have the issue dude --- And I particularly would like to say, "Grow up and stop being hypocrits!" --- So yes - If you have a comment on the suggestion I've made - then feel free to make it or otherwise I would advise that you not post in this thread at all.

Jacquii.