# Forum Security

**URL:** <https://discourse.peercoin-library.org/t/forum-security/392>\
**Category:** Forum Support\
**Created:** [October 3, 2013, 2:24pm UTC](https://discourse.peercoin-library.org/t/forum-security/392 "2013-10-03T14:24:13Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fuzzybear](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/fuzzybear/32/92_2.png) [@Fuzzybear](https://discourse.peercoin-library.org/u/Fuzzybear)\
**Post date:** [October 3, 2013, 2:24pm UTC](https://discourse.peercoin-library.org/t/forum-security/392/1 "2013-10-03T14:24:13Z")

</div>

fuzzy@anonymized.invalid

---

<div class="post-metadata">

**Author:** ![Fuzzybear](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/fuzzybear/32/92_2.png) [@Fuzzybear](https://discourse.peercoin-library.org/u/Fuzzybear)\
**Post date:** [October 3, 2013, 2:54pm UTC](https://discourse.peercoin-library.org/t/forum-security/392/2 "2013-10-03T14:54:50Z")

</div>

hmm ok looks like bitcointalk was running on SMF version 1.8 or before!! this is running on 2.0.5 so that exploit has been closed so we are safe on here from that threat as far as i can tell for now, will look round more for more info

this is thought to be the exploit [http://www.securityfocus.com/bid/39007](http://www.securityfocus.com/bid/39007)

FuzzyBear

---

<div class="post-metadata">

**Author:** ![super3](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/super3/32/61_2.png) [@super3](https://discourse.peercoin-library.org/u/super3)\
**Post date:** [October 3, 2013, 11:33pm UTC](https://discourse.peercoin-library.org/t/forum-security/392/3 "2013-10-03T23:33:03Z")

</div>

Yeah I was doing the analysis on the hack. You should be fine since you are using an upgraded version.

---

<div class="post-metadata">

**Author:** ![irritant](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/irritant/32/168_2.png) [@irritant](https://discourse.peercoin-library.org/u/irritant)\
**Post date:** [October 4, 2013, 2:48am UTC](https://discourse.peercoin-library.org/t/forum-security/392/4 "2013-10-04T02:48:08Z")

</div>

it is a known bug in 1.1.8? if so, why isnt bitcointalk back online (theymos said:“The forum won’t go back up until I know how this was done, so it could be down for a while.”)

---

<div class="post-metadata">

**Author:** ![super3](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/super3/32/61_2.png) [@super3](https://discourse.peercoin-library.org/u/super3)\
**Post date:** [October 4, 2013, 3:57am UTC](https://discourse.peercoin-library.org/t/forum-security/392/5 "2013-10-04T03:57:20Z")

</div>

[quote=“irritant, post:4, topic:392”]it is a known bug in 1.1.8? if so, why isnt bitcointalk back online (theymos said:“The forum won’t go back up until I know how this was done, so it could be down for a while.”) [/quote]He really just needs to upgrade the forum and put it back online.

---

<div class="post-metadata">

**Author:** ![Fuzzybear](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/fuzzybear/32/92_2.png) [@Fuzzybear](https://discourse.peercoin-library.org/u/Fuzzybear)\
**Post date:** [October 4, 2013, 3:15pm UTC](https://discourse.peercoin-library.org/t/forum-security/392/6 "2013-10-04T15:15:08Z")

</div>

Thanks super3 for your replies and i saw you were involved in the detection of the bitcointalk bug… its left you thinking the same as myself in that bitcointalk should just update to latest SMF version, though I imagine they have probably some plugin installed that doesn’t work on later versions, is the only reason I could come up with tbh, but yeah as far as i can see unless something else arrises then we are all safe here 🙂

FuzzyBear

---

<div class="post-metadata">

**Author:** ![super3](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/super3/32/61_2.png) [@super3](https://discourse.peercoin-library.org/u/super3)\
**Post date:** [October 4, 2013, 5:01pm UTC](https://discourse.peercoin-library.org/t/forum-security/392/7 "2013-10-04T17:01:01Z")

</div>

[quote=“FuzzyBear, post:6, topic:392”]Thanks super3 for your replies and i saw you were involved in the detection of the bitcointalk bug… its left you thinking the same as myself in that bitcointalk should just update to latest SMF version, though I imagine they have probably some plugin installed that doesn’t work on later versions, is the only reason I could come up with tbh, but yeah as far as i can see unless something else arrises then we are all safe here 🙂

FuzzyBear[/quote]As someone who has run a major forum before, as long as you keep your forum up to date and weekly backups you should be fine in all cases. The problems start to happen when you get lazy, and don’t do those things.

---

<div class="post-metadata">

**Author:** ![irritant](https://discourse.peercoin-library.org/user_avatar/discourse.peercoin-library.org/irritant/32/168_2.png) [@irritant](https://discourse.peercoin-library.org/u/irritant)\
**Post date:** [October 6, 2013, 11:16pm UTC](https://discourse.peercoin-library.org/t/forum-security/392/8 "2013-10-06T23:16:20Z")

</div>

i hear the bug was disabled and it was something else (the hack), when they’re back online there would be a full report on this