Tapatalk security issue

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Scam Warning
Swanny
Registered User
Posts: 486
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Tapatalk security issue

Post by Swanny »

So they released an updated version: https://www.tapatalk.com/groups/tapatal ... -s120.html

No specific mention of fixing the bug, probably because they don't want to publicly admit that they had this MAJOR security flaw.

Who wants to be the guinea pig and install the new version to see if it's fixed. I'm going to wait and see because I hate Tapatalk.

So I've had Tapatalk turned off now for nearly 3 weeks and I gotta say no one complained yet. Posting slowed down slightly but barely noticeable. There are less users on the forum but many people are still finding the site through Google.
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26874
Joined: Fri Aug 29, 2008 9:49 am

Re: Tapatalk security issue

Post by Mick »

Please don’t encourage people to use third party software especially when it’s faulty. This software failed phpBB approval years ago and since then they have not resubmitted supposedly because they can’t fix it.
  • "The more connected we get the more alone we become” - Kyle Broflovski© 🇬🇧
User avatar
ssl
Registered User
Posts: 2026
Joined: Sat Feb 08, 2020 2:15 pm
Location: Le Lude, Pays de la Loire - France
Name: Fred Rimbert

Re: Tapatalk security issue

Post by ssl »

Hi
What about the new version of Tapatalk?
https://www.tapatalk.com/groups/tapatal ... ml#p244538
Sorry for my English ... I do my best! :anger_right:

:point_right_tone3: phpBB: 3.3.14 | PHP: 8.3.12
:point_right_tone4: [Kill spam on phpBB] - [Some French translation of extensions]
"Mistress, Mistress someone is bothering me in pm"
User avatar
david63
Registered User
Posts: 20646
Joined: Thu Dec 19, 2002 8:08 am

Re: Tapatalk security issue

Post by david63 »

ssl wrote: Tue Aug 18, 2020 3:03 pm What about the new version of Tapatalk?
What about it? Does it now work with extensions.
David
Remember: You only know what you know and - you don't know what you don't know!

I now no longer support any of my extensions but they will start to become available here
User avatar
ssl
Registered User
Posts: 2026
Joined: Sat Feb 08, 2020 2:15 pm
Location: Le Lude, Pays de la Loire - France
Name: Fred Rimbert

Re: Tapatalk security issue

Post by ssl »

I just installed it on a test forum in version 3.3.1, yes everything seems to work
 
Sorry for my English ... I do my best! :anger_right:

:point_right_tone3: phpBB: 3.3.14 | PHP: 8.3.12
:point_right_tone4: [Kill spam on phpBB] - [Some French translation of extensions]
"Mistress, Mistress someone is bothering me in pm"
User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 6797
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James

Re: Tapatalk security issue

Post by HiFiKabin »

Just remember that (as per this topic title) there have been security issues with TAPATALK in the past and if you decide to use it, it is AT YOUR OWN RISK and we can not offer support for TAPATALK on phpbb.com
User avatar
ssl
Registered User
Posts: 2026
Joined: Sat Feb 08, 2020 2:15 pm
Location: Le Lude, Pays de la Loire - France
Name: Fred Rimbert

Re: Tapatalk security issue

Post by ssl »

I know, but my question concerns security precisely, in order to know if there is any improvement with this new version.
Sorry for my English ... I do my best! :anger_right:

:point_right_tone3: phpBB: 3.3.14 | PHP: 8.3.12
:point_right_tone4: [Kill spam on phpBB] - [Some French translation of extensions]
"Mistress, Mistress someone is bothering me in pm"
User avatar
Lumpy Burgertushie
Registered User
Posts: 69228
Joined: Mon May 02, 2005 3:11 am

Re: Tapatalk security issue

Post by Lumpy Burgertushie »

tapatalk is the only one that knows how it works or doesn't


robert
Premium phpBB 3.3 Styles by PlanetStyles.net

I am pleased to announce that I have completed the first item on my bucket list. I have the bucket.
Swanny
Registered User
Posts: 486
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Tapatalk security issue

Post by Swanny »

ssl wrote: Tue Aug 18, 2020 4:22 pm I know, but my question concerns security precisely, in order to know if there is any improvement with this new version.
When I used Tapatalk in the past they knowingly did not fix security issues. I found out one extremely bad bug that I notified them and they didn't fix it and so I disabled TT completely. It allowed any user to view any private message. Is that fixed? Who knows, I don't care anymore.
User avatar
ssl
Registered User
Posts: 2026
Joined: Sat Feb 08, 2020 2:15 pm
Location: Le Lude, Pays de la Loire - France
Name: Fred Rimbert

Re: Tapatalk security issue

Post by ssl »

When I go to private messages with a user account, I only see the PMs of this account
Sorry for my English ... I do my best! :anger_right:

:point_right_tone3: phpBB: 3.3.14 | PHP: 8.3.12
:point_right_tone4: [Kill spam on phpBB] - [Some French translation of extensions]
"Mistress, Mistress someone is bothering me in pm"
Swanny
Registered User
Posts: 486
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Tapatalk security issue

Post by Swanny »

ssl wrote: Tue Aug 18, 2020 9:27 pm When I go to private messages with a user account, I only see the PMs of this account
That's not the point. Scroll to the first post in this thread.
User avatar
ssl
Registered User
Posts: 2026
Joined: Sat Feb 08, 2020 2:15 pm
Location: Le Lude, Pays de la Loire - France
Name: Fred Rimbert

Re: Tapatalk security issue

Post by ssl »

Well this seems to be solved, by pasting the link of a PM in a message only members concerned by this PM can access it.

For the others


Image
Sorry for my English ... I do my best! :anger_right:

:point_right_tone3: phpBB: 3.3.14 | PHP: 8.3.12
:point_right_tone4: [Kill spam on phpBB] - [Some French translation of extensions]
"Mistress, Mistress someone is bothering me in pm"
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28935
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier

Re: Tapatalk security issue

Post by Paul »

That specific security issue might been solved, but I have seen multiple in the past in their code. Giving a quick look at their code (Which gives me personally a instant headache), it shows that they don't follow any of the phpBB extension policies or coding guidelines, and most definitly won't pass any extension validation without a major rewrite.
They also disable specific security features in phpBB, which a extension never should do.
User avatar
ssl
Registered User
Posts: 2026
Joined: Sat Feb 08, 2020 2:15 pm
Location: Le Lude, Pays de la Loire - France
Name: Fred Rimbert

Re: Tapatalk security issue

Post by ssl »

Thanks Paul
Sorry for my English ... I do my best! :anger_right:

:point_right_tone3: phpBB: 3.3.14 | PHP: 8.3.12
:point_right_tone4: [Kill spam on phpBB] - [Some French translation of extensions]
"Mistress, Mistress someone is bothering me in pm"
rajpb
Registered User
Posts: 34
Joined: Sat Mar 24, 2018 11:12 pm

Re: Tapatalk security issue

Post by rajpb »

They fixed this issue a few months after my first post.
BUT
They never officially admitted that they had any problem with it. I have never kept an official security ticket acknowledgment. With this approach, you never know what mistakes they are hiding.

When i disabled tapatalk in my forum tons of users wanted my head. There was a lot of hysteria and screaming.
For many of them, such a security problem was not of serious concern.
I will never turn on this plugin again, because I would probably have to go through it again in a while.

Return to “phpBB Discussion”