To All Members

I'm just a noob around here, but I have alot of respect and admiration for the owners, mods and members of this site. I voted NO because I do not want to see the super hero wannabe get his way and put a crimp in the XS style.

This guy is just a severly misguided fool that thinks he is doing someone a favorand stepping on innocent people in the process. Don't let him shape the face of XS.

I am pretty sure it is a crime to post malicious code so why not let him hang for what he did instead of the community?

Report the attack to the proper authority and let him face the price of his careless actions.

It's your choice what message you send.

Is it going to be "attack us we will close up" or is going to be "we won't stand for being attacked"?

:toast:

it's unreasonable and beyond the scope of this community to hunt for bad guys and try to protect the good guys. we could debate this to till we are all blue. instead let's keep it simple and focused on what this place is about. great communication, ideas and people. those qualities will still shine on their own @ XS.

time to get back at it.

(i vote to disable html)

So interresting thread ... actually learned quite a bit from reading through all the posts - thank you all.

Changed my mind a few times on the way - I certainly don't use HTML at the moment, but I respect those who do. It really seems to me this is a CLIENT security issue, and I understand XS are trying to do what's best for their members.

I vote for keeping HTML on. But I think it is part of XS responsibility to minimize whatever harm can be done to their members through theirs servers, where possible and not impacting for end-users - so having stronger automatic checking tools scanning each and every post for known attacks would be a responsible action on their part. Is this common (or best) practice in forums ?

I voted for Yes, I don't like the idea that some HTML code can format my harddisk. In my case that would not hurt me but maybe for some people it would. But if your harddisk can be formatted just with some internetcode there maybe are some worse things around. I don't update my windows and like to use I.E. because I don't feel like other programs can do a better job, everything works fine as it is. I can live with every solution you guys can find and I really hope this discussion will end in peace.

I don't think turning off HTML is needed. I use bbcode however, so as long as that isn't affected i'm not going to care much.

Silly script-kiddie feeling his oats.

I'd say leave HTML on, noone here with our level of knowledge should be vulnerable.... if you are, thats a wakeup call to get up to date. And consider using Firefox as well, its free and easy to install/use.

Why should we inconvenience ourselves just to limit the mischief of moron script kiddies. Educate yourself, become safe/immune and move on.

It cracks me up actually, Microsoft is sitting on the ultimate solution to all this crap. Use the VirtualPC technology to make a Single use mechanism, a disposable VirtualPC that you activate, do all your browsing on, and then close.....and everything goes with it. Make it so there are preferences saved for use..ie:favorites, cookies, etc... that get loaded into the VirtualBrowse device when activated.

Think of it as them making a canned setup, to be used for this expressed purpose, with functionality limited to just browsing/email/downloading stuff. Nothing can get fromthe VPC to the main real PC without going through bulletproof security.

Just a thought.

Quote:

---

Originally Posted by uwackme

Silly script-kiddie feeling his oats.

It cracks me up actually, Microsoft is sitting on the ultimate solution to all this crap. Use the VirtualPC technology to make a Single use mechanism, a disposable VirtualPC that you activate, do all your browsing on, and then close.....and everything goes with it. Make it so there are preferences saved for use..ie:favorites, cookies, etc... that get loaded into the VirtualBrowse device when activated.

Think of it as them making a canned setup, to be used for this expressed purpose, with functionality limited to just browsing/email/downloading stuff. Nothing can get fromthe VPC to the main real PC without going through bulletproof security.

Just a thought.

---

That is actually a really good idea. I have done something similiar to it but with live linux cds. If I am forced to use a computer that I am not to familiar with how safe it is, and I have access to the bios or better yet the hard drives. I will either disable them in the bios or unplug the power to them. Then boot the cd and do whatever browsing I need to do, rest assured in the fact that my password information and whatever I typed or wherever I visited doesn't get left on the computer I have just been using.

It is final, we will turn back on HTML code.

I have been talking to Boshi and he is truely sorry for what he has done. I am going to permit him access to post an appology to the community and he will be put on a temporary ban.

Boshi will lose some post count as I will prune everything from the date range he was posting in. None of boshi's posts were deleted, just removed from members view.

Quote:

---

Originally Posted by Kazoo

It's more often then that Saaya. ;)

@PS2pcGamer, are you also aware that version 3.07 came out less then a week after version 3.06? We are always cautious about upgrading to new versions of software without thoroughly testing it first.

---

Of course it is up to the admins to decide when to upgrade.

However, vbulliten 3.0.5 came out close to two months ago, but the headline was to fix a vulnerability in having register_globals enabled...so hopefully you guys are ok.

PHP 2.0.10 has been out for well over 2 months and there is a huge vulnerability in 2.0.8 (what you have installed)...

http://www.hardened-php.net/advisories/012004.txt


Since you guys feel you know what you are doing, I'll let it be. You guys have been targeted before by attacks (like when the front page and forums were both hacked in September) so leaving your system open to vulnerabilities is just asking for trouble.

its not my option, im not going to vote

but leaving it on is good, but if the problems get worse that XS could (doubtful) get taken over, then yes, turn off html, do what you have to do.

I love it here, would never want anything to happen :)

Hmm, I'm more interested in the XS vs. XR story, anyone want to enlighten me with it via PM or email?

I voted ON, as I agree with Matt and his statements. I also agree with boshi being re-instated as a user on this forum.

May I inquire why at the bottom of the page it says HTML + IMG code is off?

i voted "No" cause i think forums look kinda lifeless without HTML

I'll turn it back on shortly.

Quote:

---

Originally Posted by Juliette

Hmm, I'm more interested in the XS vs. XR story, anyone want to enlighten me with it via PM or email?

I voted ON, as I agree with Matt and his statements. I also agree with boshi being re-instated as a user on this forum.

May I inquire why at the bottom of the page it says HTML + IMG code is off?

---

I am wondering as well. Find the thread titles @ OC Forums and look that over. Fugger posted a few things that should help out.

jjcom

I voted no because Vb Code is here to replace HTML in forums

Quote:

---

Originally Posted by STEvil

images in your sig are using [*img][*/img], the ones in the guide were probably [*img src="xxx"]

?

---

nope, the ones in the guide are using the <IMG></IMG> tag just the <> were []

I tried it without the spaces as well. At least HTML is going to be back here soon. I relized that smly.org images weren't showing up either

jjcom

i will vote "no" - why? cos the code wasnt destructive, html looks good, the XS forums would look lifeless without it

counter argument: - someone someday would post malicious code, html off is safe

i balanced the arguments and so no is the vote...

Quote:

---

Originally Posted by Juliette

Hmm, I'm more interested in the XS vs. XR story, anyone want to enlighten me with it via PM or email?

---

I would say that the story would vary on who you asked.

Supposedly it was supposed to go to court, but I never heard what happened.

Ok, I think that NONE should take Boshi actions as XR actions. Some seems to see it that way.

The `court` is the XR version.

Don`t ask me... I`ve passed as much time posting on one as well as the other. I know nothing, but I do know that XS as a great future.

And Juliette, This is a story that you will not be sure of what is true because even if FUGGER or DaGooch says you something..... Which one beleive?... To our eyes if you hear both ``stories`` they are both good and the other one is bad.... It is not because of a lack of confidence, it is because they both have good and bads in both versions...

If there is something like a court, we will dicover that in that time. We will face the problem when there will be a problem.

Now I think the thread should go on its original subject. If someone wants to talk about the ``problem`` of XR and XS, I would suggest to not think about it;):p

Quote:

---

Originally Posted by skate2snow

Ok, I think that NONE should take Boshi actions as XR actions. Some seems to see it that way.

The `court` is the XR version.

Don`t ask me... I`ve passed as much time posting on one as well as the other. I know nothing, but I do know that XS as a great future.

And Juliette, This is a story that you will not be sure of what is true because even if FUGGER or DaGooch says you something..... Which one beleive?... To our eyes if you hear both ``stories`` they are both good and the other one is bad.... It is not because of a lack of confidence, it is because they both have good and bads in both versions...

If there is something like a court, we will dicover that in that time. We will face the problem when there will be a problem.

Now I think the thread should go on its original subject. If someone wants to talk about the ``problem`` of XR and XS, I would suggest to not think about it;):p

---

What he said.

Could you not make it a preference to see either HTML or to not see HTML in a user's sig? That way people can decide whether they want to be safe or not.

As far as formatting hard drives... there are a ton of ways to do that, and for a good part it's the users own fault when they do not secure their system (don't give me that crap about MS not being able to create a secure system, with some work it can be made safe. And that's a lot less work than getting HDTV running on my AIW under Linux)

I would vote for a alternative solution: Turn HTML off, but keep BBCode for images and stuff like that. If you link an image to a PHP or ASP script which creates an image you can still have a sig with some nice features.

Although some functionality will be lost, I do not see why all links will be lost...

Quote:

---

Originally Posted by skate2snow

Ok, I think that NONE should take Boshi actions as XR actions. Some seems to see it that way.

The `court` is the XR version.

Don`t ask me... I`ve passed as much time posting on one as well as the other. I know nothing, but I do know that XS as a great future.

And Juliette, This is a story that you will not be sure of what is true because even if FUGGER or DaGooch says you something..... Which one beleive?... To our eyes if you hear both ``stories`` they are both good and the other one is bad.... It is not because of a lack of confidence, it is because they both have good and bads in both versions...

If there is something like a court, we will dicover that in that time. We will face the problem when there will be a problem.

Now I think the thread should go on its original subject. If someone wants to talk about the ``problem`` of XR and XS, I would suggest to not think about it;):p

---

fOR WHAT IT IS WORTH, I WAS THERE THE DAY THE EVENTS TOOK PLACE
FUGGER IS 100% CORRECT. END OF STORY

You were there and yet you have no clue to what happened, yet again you know who is correct. :rolleyes:

What Marine 1 is referring to IFMU, is he was there the day the "event" happened, when Jbell locked Fugger out of XS and Fugger had to take the server down to regain control. Now, as I don't like the direction this thread is taking. I am closing the thread. Any further comments, issues, or questions should be directed to Fugger.

Thank you all for participating!

Marine_1 was an employee here at the time and saw everything first hand.

Thanks for everyones input.