Waf ? Security !!!!!

[frog-man]

I don't understand ! I've posted 2 messages (on "Feedback" and on the "French" category) about a serious security hole.
I've received a message by mail :

"
A reply has been posted to a topic you are watching.

View it at
http://www.yabbse.org/community/index.php?board=167;action=display;threadid=27587;start=new

More replies may be posted, but you won't receive more email notifications until
you read the replies

Regards,
The YaBB SE Community team.

"

But this url tell me that I'm not allowed to visit it !!!
And my two posts have been deleted !!!!!
What have I to do ?

[Peter Duggan]

I don't understand ! I've posted 2 messages (on "Feedback" and on the "French" category) about a serious security hole.

Sorry, but I moved them because the public boards aren't the best place for this kind of thing!

I've received a message by mail

That'll be because I added an explanatory note to them.

But this url tell me that I'm not allowed to visit it !!!

And that'll be because they're now in an admin area.

And my two posts have been deleted !!!!!

No, just moved to a better place.

What have I to do ?

Please contact the team direct rather than posting to the forum if you believe there to be security holes in the product.

[[Unknown]]

If you would like to know why the team didn't patch this vulnerability earlier, please see the following discussion:

http://www.yabbse.org/community/index.php?thread=27139

If no one knows about it, it's detrimental to release a fix.

It is always detrimental for this website to describe, even in a post, how to hack an older version of YaBB SE.  Continue posting exploits for any holes in any versions of any software, and I will ban you.

-[Unknown]

[frog-man]

Peter Duggan :

Ok thanks for all
About contacting team... that's what I've tried to do before posting here, but like I said, I didn't see any link "contact" or anything like that.
Thanks again for your answer

[Unknown] :

??

If you would like to know why the team didn't patch this vulnerability earlier

About what vulnerability do you speak when you say "THIS vulnerability" ?

please see the following discussion:

http://www.yabbse.org/community/index.php?thread=27139

If no one knows about it, it's detrimental to release a fix.

I've see the discussion I don't disagree with everything.
But if "it's detrimental to release a fix", do you imagine if you never release any fix ?? Would it be better ?

It is always detrimental for this website to describe, even in a post, how to hack an older version of YaBB SE.

I didn't post any vulnerability on this board, I've said that I would like to contact the team to speak about a vulnerability that I've just discovered.

Continue posting exploits for any holes in any versions of any software, and I will ban you.

I'm here to help you and you want to ban me ?
You know I don't care : this hole is YOUR problem (and the problem of your "customers"), if you don't want my help, you don't need to ban me, I can go out of this board alone.
Are you really open source ?


Sorry for my poor english.
bye
frog