Blog

Posts Tagged ‘Security’

Attachment Headaches with the Internet Explorer

Posted by Kellanved in Development, Modifications, Styles, Support with the tags , , on October 25th, 2008

Recently we got many bug reports about problems with the IE8 beta browsers. The problem is that we cannot accommodate beta browsers in our software - the next beta will break our adjustments. But why have we chosen to include some other IE8 features? The answer is simple: security
This post will give you insights into one of the more obscure security implications of file uploads.

Read the rest of this entry »

“Exploits from the crypt – let’s put them back”

Posted by Kellanved in Development with the tags , , , on July 6th, 2008

Yes, it is no secret that phpBB’s reputation regarding security has not yet recovered completely. We take every report about possible vulnerabilities seriously and are deeply grateful about reports on our security tracker. We give full credit for all undisclosed valid reports made on our trackers.

Even if one is not sure about what happened, the nice guys from the Incident Investigation Team will help you figure it out. If in doubt: report.

The things floating on the web and frequently washing up in our tracker are usually not valid, however. Ready for the fun? Here comes the first installment of “Exploits from the crypt”:

Read the rest of this entry »