Bitcoin Forum

Other => Meta => Topic started by: LFC_Bitcoin on October 27, 2014, 06:01:20 PM



Title: Changing Avatars
Post by: LFC_Bitcoin on October 27, 2014, 06:01:20 PM
Why is the 'changing avatars' option not available on my profile?

Is it because I'm still a fairly new member?


Title: Re: Changing Avatars
Post by: ChuckBuck on October 27, 2014, 06:26:28 PM
I think they disabled it for users, maybe due to some members posting inappropriate images.

I've made Senior Member, and I'm still unable to change it.


Title: Re: Changing Avatars
Post by: LFC_Bitcoin on October 27, 2014, 06:31:40 PM
Ah, fair enough.


Title: Re: Changing Avatars
Post by: moko666 on October 27, 2014, 06:36:39 PM
adding or changing avatar is currently not possible
this option is disabled by admin

i wish it will restored soon


Title: Re: Changing Avatars
Post by: gogxmagog on October 27, 2014, 09:38:38 PM
No user can change their avatar. it has been disabled. I thought I heard some talk that there was a security vulnerability associated with it. not sure if that is true or not. For more informed info on this look in Meta https://bitcointalk.org/index.php?board=24.0 (https://bitcointalk.org/index.php?board=24.0)


Title: Re: Changing Avatars
Post by: jjacob on October 28, 2014, 12:26:32 AM


https://bitcointalk.org/index.php?topic=703657.0#post_faq

Q: Why doesn't the forum let me add an avatar?
A: The forum was hacked some time ago. It is thought that the avatars were used as a means of injecting malicious code into the forum. Even though the vulnerability was patched, the avatars will be disabled until a new forum software (https://bitcointalk.org/index.php?topic=523070.0) is released.

Q: So when is the new forum software coming?
A: Well, according to theymos, some time after February 2015.

<...>
Quote
When will the software be finished?

About one year from now.
<...>



Title: Re: Changing Avatars
Post by: sickhouse on October 28, 2014, 01:13:30 AM
Can't wait, people will recognize me easier with an avatar... Jealous of you lucky people who already have one  ;)


Title: Re: Changing Avatars
Post by: Dare on October 28, 2014, 01:19:33 AM
To quote myself from the last time this question came up (yes, it's been asked at least this many times; please use the search function before posting to see if your question has already been answered!):

Any progress?

Please turn off this forum! The avatars are the only advantage over a mailing list. This is bitter but true. Give something better a chance. Give up!

I'm pretty sure that avatars will be disabled until at least the new forum is out and being used - as theymos has stated it was removed due to an exploit made possible by avatars and though I believe the exploit has been patched he is not keen on restoring the functionality.

From what I've heard, pretty much. The exploit involved uploading a php script instead of an image into an executable directory, then using it to put some (slightly) malicious Javascript into the forum's MOTD so that it ran on every page. I followed the troubleshooting and analysis through IRC while it was being fixed immediately after the hack, but it seems that avatars may be disabled for a while anyway.

Though the exploit used has been patched, it's been long enough that I suspect new avatars may remain disabled until the new forum software is put into place, but those who had them before the hack like me were able to keep them (though we can't change our avatars either).


Title: Re: Changing Avatars
Post by: alesx.onfire on October 28, 2014, 08:50:42 PM
You can't change your avatar, you can't add, or upload one.

Avatar's is currently disabled for new members from 2012 (as i know).


Title: Re: Changing Avatars
Post by: Pkofet on October 29, 2014, 02:34:43 AM
You can't change your avatar, you can't add, or upload one.

Avatar's is currently disabled for new members from 2012 (as i know).

The avatar system has been disabled since the hack in Oct 2013 https://bitcointalk.org/index.php?topic=306878.0