Register Members List Search Today's Posts Mark Forums Read

Closed Thread
 
Thread Tools
  #1  
Old 15 Nov 2007, 15:06
GoTTi GoTTi is offline
 
Join Date: Jun 2002
why does MicroHellas mod's all seem to get dumped into the graveyard?

MicroHellas just released today a mod called mysocialspace. some of us were working on the mod on our sites and about 5 minutes ago it got removed to the graveyard.

so i checkedout the coders other mods and all of her mods except the journal have been dumped into the graveyard for having security vulns' in each mod.

what is all this about? what are the vulns we should know about if we installed her mod or any coders mod and its labeled a risk? why does MicroHellas mods keep getting trashed??

just courious. thanks.
  #2  
Old 15 Nov 2007, 15:13
deezelpope deezelpope is offline
 
Join Date: Feb 2007
I believe she had asked them to be put there.
  #3  
Old 15 Nov 2007, 15:26
yoyoyoyo's Avatar
yoyoyoyo yoyoyoyo is offline
 
Join Date: Dec 2004
Originally Posted by GoTTi View Post
MicroHellas just released today a mod called mysocialspace. some of us were working on the mod on our sites and about 5 minutes ago it got removed to the graveyard.

so i checkedout the coders other mods and all of her mods except the journal have been dumped into the graveyard for having security vulns' in each mod.

what is all this about? what are the vulns we should know about if we installed her mod or any coders mod and its labeled a risk? why does MicroHellas mods keep getting trashed??

just courious. thanks.
mods are usually moved there due to security flaws, until the developer chooses to fix them, and then they are removed from the graveyard. If you are using mods that are currently in the graveyard then proceed with caution.
  #4  
Old 15 Nov 2007, 15:33
nexialys
Guest
 
you did not ask her first?!

she have her own official commercial website, so you can go there for support!...
  #5  
Old 15 Nov 2007, 15:51
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
I believe that mysocialspace has been quarantined due to security issues in the code.
__________________
Former vBulletin.org Staff Member


Cable Forum
Please do not PM me about custom work - I no longer undertake any.
Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #6  
Old 15 Nov 2007, 15:54
yoyoyoyo's Avatar
yoyoyoyo yoyoyoyo is offline
 
Join Date: Dec 2004
Originally Posted by GoTTi View Post
what are the vulns we should know about if we installed her mod or any coders mod and its labeled a risk?
vb.org does not release the details of the flaws, in order to protect the people who have installed the mods from hackers.
  #7  
Old 15 Nov 2007, 16:07
Lionel Lionel is offline
 
Join Date: Dec 2001
Real name: Lionel
Originally Posted by yoyoyoyo View Post
mods are usually moved there due to security flaws, until the developer chooses to fix them, and then they are removed from the graveyard. If you are using mods that are currently in the graveyard then proceed with caution.
not all the time. I recently requested that they delete/send one my mod in the graveyard. Nothing was wrong with it, except that I am puting out one which is 100 times better and query free.
  #8  
Old 15 Nov 2007, 16:20
yoyoyoyo's Avatar
yoyoyoyo yoyoyoyo is offline
 
Join Date: Dec 2004
Originally Posted by Lionel View Post
not all the time. I recently requested that they delete/send one my mod in the graveyard. Nothing was wrong with it, except that I am puting out one which is 100 times better and query free.
Yep, I know, I said "usually" Obviously, this is not the case 100% of the time, but according to paul, the mod in question was moved to the graveyard due to security holes. I wonder if the same is true with vBJournal?
  #9  
Old 15 Nov 2007, 17:23
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
Originally Posted by yoyoyoyo View Post
I wonder if the same is true with vBJournal?

Yes it is.
__________________
Former vBulletin.org Staff Member


Cable Forum
Please do not PM me about custom work - I no longer undertake any.
Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #10  
Old 16 Nov 2007, 05:46
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Those that had the modification marked as installed will have received an email with the reason it was placed in the graveyard. For others this should be of no concern.
__________________
Marco van Herwaarden
Ex vBulletin.org Coordinator
  #11  
Old 16 Nov 2007, 14:03
Greek76's Avatar
Greek76 Greek76 is offline
 
Join Date: Sep 2006
Thats a shame that looked like a great mod and was ready to download it.... She does make good mods and never had any problems with them.
  #12  
Old 16 Nov 2007, 20:45
GoTTi GoTTi is offline
 
Join Date: Jun 2002
well apparently mary has posted what has been going on about this mod, view here: http://www.++++++++++.com/forums/showthread.php?p=3222

it doesn't make sense that first Calorie says there is a security risk, when it narrows down to a Error Page being displayed....i dont get it....

this mod should have never been taken off the mod pages. there is no security risk in it. we need more mods and addons for 3.6x, and coders liek Mary shouldn't be shut down because of mistakes by the staff here, first claiming it is a security risk, then next claiming its only a error page issue...

if thats the case, bring the mod back and please, next time, control your left clicks.
  #13  
Old 16 Nov 2007, 20:56
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
Making posts when you have no idea of the facts is not a very clever thing to do.

There are several security risks in the code, no mistake has been made by the staff, only by you.
__________________
Former vBulletin.org Staff Member


Cable Forum
Please do not PM me about custom work - I no longer undertake any.
Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #14  
Old 16 Nov 2007, 21:27
Lionel Lionel is offline
 
Join Date: Dec 2001
Real name: Lionel
Taken from her site:

But just for the history, he has also a similar commercial module.
So please someone, besides photoplog, what is calorie website? He is an excellent coder and if he has commercial mods, I want to look at them.
  #15  
Old 16 Nov 2007, 21:36
ragtek's Avatar
ragtek ragtek is offline
 
Join Date: Mar 2006
Location: austria, croatia
i think she's talking about princeton and his blog
__________________
my addons: http://ragtek.github.com
Closed Thread



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 12:15.

Layout Options | Width: Wide Color: