Register Members List Search Today's Posts Mark Forums Read

Closed Thread
 
Thread Tools
  #1  
Old 25 Mar 2016, 15:03
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
Password Reset

Due to the discovery yesterday of unauthorised access to of one of the VBG servers it is possible the hacker may have gained access to other vb systems as well.

Therefore we have again taken the precaution of resetting all user password hashes.

To be able to login to the site you will need to use the lost password functionality.

http://www.vbulletin.org/forum/login.php?do=lostpw

We apologise for any inconvienience this may cause.
__________________

Cable Forum
Lead Developer, vBulletin.Org & vBulletin.Com
Please do not PM me about custom work - I no longer undertake any.

Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #2  
Old 25 Mar 2016, 15:09
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
Will there be any information regarding this incident later? For example how it happened or if this happened because of a vBulletin exploit?

This is really painful for vBulletin, especially since it's not the first time. Glad I use random generated passwords...
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
  #3  
Old 25 Mar 2016, 15:35
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
I'm not sure what information you mean, there certainly wont be any detailed information on how it was done - however, I can tell you it wasnt via any vB exploit - in fact, the VBG site doesnt run vbulletin. Someone clearly targetted the site, it was obvious they had planned this quite carefully.
__________________

Cable Forum
Lead Developer, vBulletin.Org & vBulletin.Com
Please do not PM me about custom work - I no longer undertake any.

Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #4  
Old 25 Mar 2016, 17:07
Phillip's Avatar
Phillip Phillip is offline
 
Join Date: Apr 2014
I was wondering why I couldn't login in, but then I read this post and reset mine.
__________________
“Be who you are and say what you feel, because those who mind don't matter, and those who matter don't mind.”
― Bernard M. Baruch
  #5  
Old 25 Mar 2016, 17:12
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Originally Posted by Paul M View Post
I'm not sure what information you mean, there certainly wont be any detailed information on how it was done - however, I can tell you it wasnt via any vB exploit - in fact, the VBG site doesnt run vbulletin. Someone clearly targetted the site, it was obvious they had planned this quite carefully.
If VBG does not run vb and there is no vb exploit then why reset passwords
  #6  
Old 25 Mar 2016, 17:28
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
Originally Posted by ForceHSS View Post
If VBG does not run vb and there is no vb exploit then why reset passwords
Cause of this:

"Due to the discovery yesterday of unauthorised access to of one of the VBG servers it is possible the hacker may have gained access to other vb systems as well."
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. This will also include any new mods I make.
All my mods are updated on OzzModz to do the version checking there instead of here. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​
  #7  
Old 25 Mar 2016, 19:04
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
Originally Posted by ForceHSS View Post
If VBG does not run vb and there is no vb exploit then why reset passwords
As pointed out by Ozzy above.
__________________

Cable Forum
Lead Developer, vBulletin.Org & vBulletin.Com
Please do not PM me about custom work - I no longer undertake any.

Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #8  
Old 26 Mar 2016, 00:43
Manoel Júnior's Avatar
Manoel Júnior Manoel Júnior is offline
 
Join Date: Feb 2009
Real name: Manoel Júnior
Again?!! A feather
  #9  
Old 26 Mar 2016, 01:39
ProSportsForums's Avatar
ProSportsForums ProSportsForums is offline
 
Join Date: Apr 2010
Real name: Michael
Originally Posted by Paul M View Post
Someone clearly targetted the site, it was obvious they had planned this quite carefully.
Now, who would have a vested interest in taking down vBulletin?
  #10  
Old 26 Mar 2016, 02:08
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
Originally Posted by ProSportsForums View Post
Now, who would have a vested interest in taking down vBulletin?
Any script kiddie trying to make a name for themselves.
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. This will also include any new mods I make.
All my mods are updated on OzzModz to do the version checking there instead of here. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​
  #11  
Old 26 Mar 2016, 12:02
nhawk nhawk is offline
 
Join Date: Jan 2011
Originally Posted by Paul M View Post
in fact, the VBG site doesnt run vbulletin.
I'm confused. VBG doesn't run vbulletin? Sure looks like vbulletin. Or am I thinking of the wrong vB Germany?
  #12  
Old 26 Mar 2016, 14:42
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Real name: Paul M
The forum is not run by IB, we run their support & licensing still.
__________________

Cable Forum
Lead Developer, vBulletin.Org & vBulletin.Com
Please do not PM me about custom work - I no longer undertake any.

Note: I will not answer support questions via e-mail or PM - please use the relevant thread or forum.
  #13  
Old 26 Mar 2016, 14:48
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
Originally Posted by Paul M View Post
The forum is not run by IB, we run their support & licensing still.
So what part of the site was targeted, the forum, the support system or the licensing system?
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. This will also include any new mods I make.
All my mods are updated on OzzModz to do the version checking there instead of here. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​
  #14  
Old 27 Mar 2016, 01:46
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Don't see how VG has anything to do with this site or any vb site as each site as separate info its not like we are all one big db
Closed Thread



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 10:23.

Layout Options | Width: Wide Color: