Ubuntu Forums - FYI

[Basil Chupin]

On 22/07/13 03:13, Istimsak Abdulbasir wrote:
>
> Nothing is unhackable. It does not matter what system you use, linux, 
> windows or MacOS. All it takes is time and determination. Linux is by 
> far the best system to use for security implementation. It has many 
> options. The well known one is requiring root privilege for system 
> configuration. That is if the user knows what they are doing.
>
> In the case of the ubuntu forums, vbulletin was the victim and it was 
> said that this software was outdated. Why canonical did not recognize 
> this is a big question. Even on a secure system, if the user or admin 
> don't take all the necessary steps to insure strong security, then 
> anything can be hacked. This is not a reason. Remember, the system 
> offers option of security. It is the user that needs to know how to 
> use it.
>
> On Jul 21, 2013 10:28 AM, "Basil Chupin" <blchupin at iinet.net.au 
> <mailto:blchupin at iinet.net.au>> wrote:
>
>     On 21/07/13 23:32, compdoc wrote:
>
>             Doesn't really answer the question: what system is this
>             vBulletin being
>
>         run on? Windows?
>
>         I doubt a community that loves linux would run their systems
>         on windows.
>
>
>     What I am surprised about is that I would have expected an
>     avalanche of posts stating that vBulletin is being run on a server
>     using Linux but so far no one has come up with such an assurance
>     which indicates to me that Windows is involved.
>
>     What is that (?)annual competition for hackers where the first
>     prize offered is the latest model of a well known brand of laptop
>     and where, at all such competitions, the first system to be hacked
>     is Windows (the last time it took someone less than 2 minutes to
>     hack it) followed by Apple, which took a just a bit longer, and
>     Linux has yet to be hacked?
>
>     BC
>
>     -- 
>     Using openSUSE 12.3, KDE 4.11.0 & kernel 3.10.1-3 on a system with-
>     AMD FX 8-core 3.6/4.2GHz processor
>     16GB PC14900/1866MHz Quad Channel Corsair "Vengeance" RAM
>     Gigabyte AMD3+ m/board; Gigabyte nVidia GTX550Ti 1GB DDR5 GPU
>


Yes, I read the wikipedia entry for vBulletin and it shows how many bugs 
had been fixed in recent years,

"On 12 January 2010, vBulletin 4.0.1 was released with over 200 bug 
fixes and style tweaks. On 8 April 2010, vBulletin 4.0.3 was released 
with over 300 bug fixes as well as simple integration with Facebook 
Connect for single-signon between customer's boards and Facebook. On 18 
June 2010, vBulletin 4.0.4 is released with over 450 bug fixes. The 
release was made despite various "showstopper" bugs, many of which 
caused issues with the upgrade process. On 24 June 2010, vBulletin 4.0.4 
"Patch Level 1" was released, but none of the previous showstopper bugs 
were fixed, except for two widget bugs according to official announcement."

I like the last sentence above :-) .

BC

-- 
Using openSUSE 12.3, KDE 4.11.0 & kernel 3.10.1-3 on a system with-
AMD FX 8-core 3.6/4.2GHz processor
16GB PC14900/1866MHz Quad Channel Corsair "Vengeance" RAM
Gigabyte AMD3+ m/board; Gigabyte nVidia GTX550Ti 1GB DDR5 GPU