Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 23 May 2014, 16:56
OldSchoolDSL OldSchoolDSL is offline
 
Join Date: Oct 2010
Real name: Adam H.
Lightbulb IMPORTANT --- Security Flaw in TapaTalk

If you're site is using TapaTalk, update now! There was a security flaw found in TapaTalk and they decided NOT to inform anyone or advise anyone to update their files.

I did not find out until today, when I just happen to scroll over and found a post about it.

They even publicly admit to patching it silently, but NOT issuing a release or any notice telling people they should replace their files (because they did not even bother changing the version number either).

So I can only imagine how many sites are using the other copy without knowing they have a problem. This is completely irresponsible.

Originally Posted by TapaTalk
Hi,

This issue has been addressed in April 26th, 9 days before this site published the issue. However, since this is a low risk item - we have simply replaced all the plugins that are affected. If this is concerning you and If you have updated the plugin after April 26th, you are not affected.
Source: https://support.tapatalk.com/threads...9/#post-131407

attached screenshot to confirm
Attached Images
File Type: jpg Screenshot from 2014-05-23 11:19:55.jpg (52.7 KB, 24 views)
File Type: jpg Screenshot from 2014-05-23 11:21:54.jpg (67.9 KB, 17 views)
File Type: jpg Screenshot from 2014-05-23 11:22:03.jpg (58.2 KB, 14 views)
Reply With Quote
  #2  
Old 23 May 2014, 17:20
blind-eddie's Avatar
blind-eddie blind-eddie is offline
 
Join Date: Apr 2006
Real name: Tim
Nice....
__________________
LONG LIVE 3.8 SERIES
National Arcade Competition Club- NACC All arcade edits will work on vb4.
Check out my heavily modified ibproarcade with over 50,000 games for you, free of charge!
Exclusive arcade addons, edits and skins were made by stangger5 owner of Next Level Arcade
Reply With Quote
  #3  
Old 24 May 2014, 00:22
CharlieDelta CharlieDelta is offline
 
Join Date: Apr 2010
Just another reason I am glad I do not use their plugin.
Reply With Quote
  #4  
Old 24 May 2014, 12:56
RichieBoy67's Avatar
RichieBoy67 RichieBoy67 is offline
 
Join Date: Apr 2004
Real name: Richie
There are updates for that plug in every couple weeks. It is very simple to update normally but it gets irritating especially when most of the updates offer no features or anything.
__________________

Let us take care of your forum, seo, seo reports, maintenance, what ever you need.

Reply With Quote
  #5  
Old 24 May 2014, 13:37
CAG CheechDogg's Avatar
CAG CheechDogg CAG CheechDogg is offline
 
Join Date: Feb 2012
I use tapatalk and I haven't had any problems with it ... I actually check quite frequently to see if the file versions have changed...I did notice the version of the file change when this happened and I updated ..I didn't know why it changed but I updated right away ....

It's not just the responsibility of tapatalk to let us know when something like this happens ...they deemed it was not necessary to put out a notice about this but I noticed it so I updated ...

We have to be careful ourselves and also make sure that we monitor what plugins we use and not always rely on these 3rd parties to notify us of threats ...sometimes "we" have to do our part ....
Reply With Quote
  #6  
Old 24 May 2014, 14:02
RichieBoy67's Avatar
RichieBoy67 RichieBoy67 is offline
 
Join Date: Apr 2004
Real name: Richie
Originally Posted by CAG CheechDogg View Post
I use tapatalk and I haven't had any problems with it ... I actually check quite frequently to see if the file versions have changed...I did notice the version of the file change when this happened and I updated ..I didn't know why it changed but I updated right away ....

It's not just the responsibility of tapatalk to let us know when something like this happens ...they deemed it was not necessary to put out a notice about this but I noticed it so I updated ...

We have to be careful ourselves and also make sure that we monitor what plugins we use and not always rely on these 3rd parties to notify us of threats ...sometimes "we" have to do our part ....
Very true. I have not had any issues with it either and have had it on sites for years. I see so many emails though from Tapatalk I often ignore them and just check the site every so often for an update.

I would love to use the paid version but I just cannot see spending another monthly fee on it right now.

One thing I have never figured out though is how to get sites listed higher up with in their search engine. One of my sites has had Tapatalk since it came out and it is still not very high up. I think maybe the premium users get listed higher.

Good warning though..I would not have updated this quickly had I not read this thread.
__________________

Let us take care of your forum, seo, seo reports, maintenance, what ever you need.

Reply With Quote
  #7  
Old 24 May 2014, 14:12
CAG CheechDogg's Avatar
CAG CheechDogg CAG CheechDogg is offline
 
Join Date: Feb 2012
Originally Posted by RichieBoy67 View Post
Very true. I have not had any issues with it either and have had it on sites for years. I see so many emails though from Tapatalk I often ignore them and just check the site every so often for an update.

I would love to use the paid version but I just cannot see spending another monthly fee on it right now.

One thing I have never figured out though is how to get sites listed higher up with in their search engine. One of my sites has had Tapatalk since it came out and it is still not very high up. I think maybe the premium users get listed higher.

Good warning though..I would not have updated this quickly had I not read this thread.

And Richie that is also a problem, a lot of people don't actually check their emails like you just said, you ignore them and some even use emails that they don't even have active anymore and these important updates go unnoticed quite often.

I don't use the paid version and I don't see a need to either. I didn't even know there was a list within their search of the sites ! lol ...Most of the traffic now that comes to my forums is through tapatalk and I easily have over 200-300 posts per day on my forums. They just love tapatalk because they can stay updated and post where ever they go.

And yes good warning, I actually checked to see if the file version had changed and it was still the same so im good to go.....
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 09:18.

Layout Options | Width: Wide Color: