Tapatalk security issue

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Scam Warning
Swanny
Registered User
Posts: 459
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Tapatalk security issue

Post by Swanny »

So they released an updated version: https://www.tapatalk.com/groups/tapatal ... -s120.html

No specific mention of fixing the bug, probably because they don't want to publicly admit that they had this MAJOR security flaw.

Who wants to be the guinea pig and install the new version to see if it's fixed. I'm going to wait and see because I hate Tapatalk.

So I've had Tapatalk turned off now for nearly 3 weeks and I gotta say no one complained yet. Posting slowed down slightly but barely noticeable. There are less users on the forum but many people are still finding the site through Google.
User avatar
Mick
Support Team Member
Support Team Member
Posts: 22919
Joined: Fri Aug 29, 2008 9:49 am
Location: Watching cricket probably.

Re: Tapatalk security issue

Post by Mick »

Please don’t encourage people to use third party software especially when it’s faulty. This software failed phpBB approval years ago and since then they have not resubmitted supposedly because they can’t fix it.
"The more connected we get the more alone we become" - Kyle Broflovski©
User avatar
ssl
Registered User
Posts: 319
Joined: Sat Feb 08, 2020 2:15 pm
Location: France
Name: Fred
Contact:

Re: Tapatalk security issue

Post by ssl »

Hi
What about the new version of Tapatalk?
https://www.tapatalk.com/groups/tapatal ... ml#p244538
Sorry for my English ... I do my best!
User avatar
david63
Registered User
Posts: 18614
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Contact:

Re: Tapatalk security issue

Post by david63 »

ssl wrote:
Tue Aug 18, 2020 3:03 pm
What about the new version of Tapatalk?
What about it? Does it now work with extensions.
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored
User avatar
ssl
Registered User
Posts: 319
Joined: Sat Feb 08, 2020 2:15 pm
Location: France
Name: Fred
Contact:

Re: Tapatalk security issue

Post by ssl »

I just installed it on a test forum in version 3.3.1, yes everything seems to work
 
Sorry for my English ... I do my best!
User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 5035
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Tapatalk security issue

Post by HiFiKabin »

Just remember that (as per this topic title) there have been security issues with TAPATALK in the past and if you decide to use it, it is AT YOUR OWN RISK and we can not offer support for TAPATALK on phpbb.com
User avatar
ssl
Registered User
Posts: 319
Joined: Sat Feb 08, 2020 2:15 pm
Location: France
Name: Fred
Contact:

Re: Tapatalk security issue

Post by ssl »

I know, but my question concerns security precisely, in order to know if there is any improvement with this new version.
Sorry for my English ... I do my best!
User avatar
Lumpy Burgertushie
Registered User
Posts: 68323
Joined: Mon May 02, 2005 3:11 am
Contact:

Re: Tapatalk security issue

Post by Lumpy Burgertushie »

tapatalk is the only one that knows how it works or doesn't


robert
I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.3 Styles by PlanetStyles.net

If nobody is in the forest, does a tree really fall?
Swanny
Registered User
Posts: 459
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Tapatalk security issue

Post by Swanny »

ssl wrote:
Tue Aug 18, 2020 4:22 pm
I know, but my question concerns security precisely, in order to know if there is any improvement with this new version.
When I used Tapatalk in the past they knowingly did not fix security issues. I found out one extremely bad bug that I notified them and they didn't fix it and so I disabled TT completely. It allowed any user to view any private message. Is that fixed? Who knows, I don't care anymore.
User avatar
ssl
Registered User
Posts: 319
Joined: Sat Feb 08, 2020 2:15 pm
Location: France
Name: Fred
Contact:

Re: Tapatalk security issue

Post by ssl »

When I go to private messages with a user account, I only see the PMs of this account
Sorry for my English ... I do my best!
Swanny
Registered User
Posts: 459
Joined: Sun Apr 14, 2002 2:11 am
Location: Canada

Re: Tapatalk security issue

Post by Swanny »

ssl wrote:
Tue Aug 18, 2020 9:27 pm
When I go to private messages with a user account, I only see the PMs of this account
That's not the point. Scroll to the first post in this thread.
User avatar
ssl
Registered User
Posts: 319
Joined: Sat Feb 08, 2020 2:15 pm
Location: France
Name: Fred
Contact:

Re: Tapatalk security issue

Post by ssl »

Well this seems to be solved, by pasting the link of a PM in a message only members concerned by this PM can access it.

For the others


Image
Sorry for my English ... I do my best!
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 26961
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: Tapatalk security issue

Post by Paul »

That specific security issue might been solved, but I have seen multiple in the past in their code. Giving a quick look at their code (Which gives me personally a instant headache), it shows that they don't follow any of the phpBB extension policies or coding guidelines, and most definitly won't pass any extension validation without a major rewrite.
They also disable specific security features in phpBB, which a extension never should do.
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development
User avatar
ssl
Registered User
Posts: 319
Joined: Sat Feb 08, 2020 2:15 pm
Location: France
Name: Fred
Contact:

Re: Tapatalk security issue

Post by ssl »

Thanks Paul
Sorry for my English ... I do my best!
rajpb
Registered User
Posts: 34
Joined: Sat Mar 24, 2018 11:12 pm

Re: Tapatalk security issue

Post by rajpb »

They fixed this issue a few months after my first post.
BUT
They never officially admitted that they had any problem with it. I have never kept an official security ticket acknowledgment. With this approach, you never know what mistakes they are hiding.

When i disabled tapatalk in my forum tons of users wanted my head. There was a lot of hysteria and screaming.
For many of them, such a security problem was not of serious concern.
I will never turn on this plugin again, because I would probably have to go through it again in a while.
Post Reply

Return to “phpBB Discussion”