Security bounties

[Check-0]

>> Are you telling me decentralization is better for scalability/performance at this point? Def not. Also interesting you are first for keeping IPs private but now you want a P2P forum?

My previous post is a set of ideas for theymos to think about, while he studies PHP and that "new" Javascript ...  
He can pick something useful from it...
as he tries to stay behind of time and progress, he maybe will accept some ideas at least  
So it looks eclectic and messed dish just bcoz i feed  conservators

>> Well for some people it's just about usability. But an optional option to only do (automatic, not manual like now) recovery by signing w/ a specific addy would be cool.

yes, would be nice to have different options for password recovery, tweakable in profile,
with safest option set on by default.

>> Not storing IPs def will be bad against spam / trolls / etc.

My point was : to store IPs and other sensitive info ( emails too ) in special separated storage, preferably in member's browser.
I did not say : "never store IPs !!!"

>> Seriously, "don't use passwords" is easier said than done.

Yes, not easy. But why cant we have a choice : power members can log in with keys, bitcoin addresses, good wishes etc AND just members can log in with passwords ?!
It can be done for sure.

>> Performance of decentralized forum software at this point will be very shit AFAIK.

the same will  be true for Epochtalk i guess. which is alfa, unaudited engine.
My point here was : if theymos will stuck with traditional approaches,
he will lose community due to aftermath of next hacks, social engineering "accidents" etc.
BTW we are now on Romania based hoster.
are romanian front desk guys safer when it comes to social engineering, than NL based ones ?!

Code:

SummaryIP Address	Root Domain	Hosting Provider
198.251.81.170	bitcointalk.org	FranTech Solutions
Hosting Provider's DetailTitle	Statistics
Country	United States
Flag	
City	Cheyenne
ISP	FranTech Solutions
Organization	Voxility S.R.L.

[2112]

Are we really in 2015 ?!

No, we are in a time-loop. We went back to about 1970 when the sales of "time-shared" computer services were at their highest. "Time-share" term was later appropriated by the vacation real-estate salesmen, so the computer salesmen renamed their "time-shares" to "cloud computing".

But the bullshit stayed the same.

[Spendulus]

Are we really in 2015 ?!

No, we are in a time-loop. We went back to about 1970 when the sales of "time-shared" computer services were at their highest. ....

Some years off in that one...1970 was mostly punched cards.  I'd guess timeshared computer services maxed out in parallel with the first five or ten years of the PC.

[2112]

Are we really in 2015 ?!

No, we are in a time-loop. We went back to about 1970 when the sales of "time-shared" computer services were at their highest. ....

Some years off in that one...1970 was mostly punched cards.  I'd guess timeshared computer services maxed out in parallel with the first five or ten years of the PC.

Not in the USA and other relatively advanced economies. There the order was approximately:

196x) organization-owned mainframes
197x) shared rented mainframes (provider-owned)
198x) departmental minicomputers (back to organization-owned)
199x) personal computers (both organization-owned and individual-owned)

Also, I'm talking about broad industrial/commercial/academic trends, not about various niches.

Edit: added one more decade and ownership qualification

[Decoded]

Just asking regarding you mentioning mod-related vulnerabilities in the OP.

Mods don't have access to the server(s) that host bitcointalk, right? Only you and maybe Badbear?

[theymos]

Mods don't have access to the server(s) that host bitcointalk, right?

They do not.

[kano]

In case you didn't notice Theymos ...
It would appear that the email harvesting from the 2015 hack, has recently put the forum email addresses from back then into spam lists.
https://bitcointalk.org/index.php?topic=1635595.0

Looks like you need to up the bounties and/or find someone who can be rewarded them

[EnacDomains]

when will the Iron tank forum be released?

[Mad7Scientist]

No exploit stopped by Cloudflare should ever get anywhere near affecting the forum, and any exploit that is stopped can almost certainly be done in some other way that won't be stopped.

In other words, give cloudflare the ability to MITM. Reverse proxy services should be seen as a a last resort, and all cloudflare's WAF will do is stop basic SQL injection, XSS, etc.

These people really seem to know what they're doing, and theymos keeps doing it despite stupid comments from people who blurt out whatever without doing any research about what they're talking about. It's nice to be on a forum that's so well run.

[Dorkie]

Bullshit offer.
If you are sincere in solving any security breach, you should seek paid professionals.

[BattleZeo]

No, we are in a time-loop. We went back to about 1970 when the sales of "time-shared" computer services were at their highest. "Time-share" term was later appropriated by the vacation real-estate salesmen, so the computer salesmen renamed their "time-shares" to "cloud computing".

But the bullshit stayed the same.

You have a rich imagination. 

[Bitcoin_BOy$]

I have sent Theymos a PM.

[theymos]

Added:

Extra bounties

These bounties use a separate system of calculation, but are subject to the same conditions as above.

- 1 XAU: Find the email address of user DefaultTrust and explain in detail how you did it.

[ScrumbleGames]

sweet, but i think that is already in progress isnt it?

[braindeadgenius]

So, looking at this thread and reading an old thread from 2014 on forum improvements / upgrades, is there a plan to ever move on from SMF? This is outdated software and you'd have much better luck (as I'm sure you know) moving onto bigger and better things. I mean, you're not even running anything close to the newest version of SMF either.

[loewe007]

Sorry about my question, what is SMF ?

[actmyname]

Sorry about my question, what is SMF ?

Simple Machines Forum.

It's the foundation of the forum.Read more about it on the official site: https://www.simplemachines.org/

You'll find a lot of layout similarities

[Mr.Spider703]

theymos I sent you a personal message with a description, I hope help

[great0ne]

Hello Theymos Im send u message plz check

[KyleSpades]

Sorry about my question, what is SMF ?

It's a forum "engine". You use it to create forums, exactly like has been done for bitcointalk.org. You (or anyone who's actually reading this) can find more info on their official website: https://www.simplemachines.org/