psoTFX wrote:I'm bumping this as a further reminder to all users to UPGRADE TO 2.0.11 if they haven't already. If you visit or know of a phpBB board running versions below 2.0.11 please contact the admins/moderators of that board and tell them of 2.0.11.
Today another wonderful experiment in how to do harm seems to have been unleashed, the Santy.A worm. This little perl script makes use of the highlighting exploit to deface sites running phpBB pre-2.0.11.
In the past I've been against the inclusion of any ACP based "new version" system for various reasons; bandwidth here and most of all privacy issues (and how some will claim we're using it to "track" installations). This situation is however leading to a change in stance on this.
However that won't help the current situation, nor I suspect will it impact a majority of the current 2.0.x userbase (who would need to upgrade to get any such funtionality!). We still get posts from users running versions of phpBB released two years ago ... it's essential that admins/owners of boards take some responsbility for the software they use. So again, if you haven't upgraded, or know of a board that hasn't, please do the right thing.
Users browsing this forum: oBot and 30 guests