Members Login
Username 
 
Password 
    Remember Me  
Post Info TOPIC: Mods


Tennis legend

Status: Offline
Posts: 13869
Date:
Mods


Hi Ali thanks for bringing this to attention. I have tweeted both Steven and Sheddie. I imagine someone has gained access to one of their accounts as they are the only ones who can create new mods.

__________________


All-time great

Status: Offline
Posts: 5568
Date:

Good plan, thank you.

__________________


Tennis legend

Status: Offline
Posts: 19391
Date:

Super sleuthing from ABB there. What a good spot and thanks for helping to keep the board safe.

__________________


Tennis legend

Status: Offline
Posts: 55133
Date:

Bob in Spain wrote:

Super sleuthing from ABB there. What a good spot and thanks for helping to keep the board safe.


 Ditto - brilliant work



__________________


Tennis legend

Status: Offline
Posts: 34418
Date:

Thanks for this, ABB, and to wolf for alerting me on Twitter. This must be a global Activeboard problem and I think I'll need to Sheddie to contact them about it, since the board is registered in his name.

Looking at the settings for the 3 fake mods ABB noticed (one of whom has lots of stuff about pharmaceuticals in their profile, the others lots of stuff about biometric passports), they had given themselves the ability to "Ban Users and IPs" but not anything else (i.e. they have not given themselves the ability to moderate or edit other users' comments, tag threads, edit users' information or make new mods) and I have revoked that access for them, which has taken them off the mods list. However, presumably if they have made themselves mods once, they could do so again until Activeboard solves the problem. I've also changed my password in case they managed to hack my account and mod themselves that way but since they'd have first needed to work out that I was one of just 3(?) mods who can give that access, that seems highly unlikely.

I'm not sure how to completely ban users who haven't posted (none of them have) but maybe there is a way and I'll remember it after writing this - if not, I imagine Sheddie is able to do it.

Hopefully no fake mods will manage to actually ban anyone but if anyone does find themselves banned in the meantime, please either tweet me (@gbtennis) or, perhaps better since he has more advanced access to undo bans, etc, Sheddie (@dcwriter89) - if you're not on Twitter, you can contact another member if you know them personally or register a new account (you'll probably need to do this from a different device/network if your IP has been banned) and PM one of us so that we can try to resurrect your original account.

Since the fake mods all registered more than 6 weeks ago and, as far as I know, no genuine users have been banned in this time, this may well mean that an Activeboard weakness was exploited to automatically create fake mods on loads of Activeboard forums and they haven't actually been used to do anything on this board yet. Of course, it may also mean that the Activeboard weakness was plugged in mid-June and there is no ongoing danger now that I have de-modded the existing fake mods, but if anyone notices any new fake mods from now on, please let us know so that we can de-mod them as quickly as possible.

Mods can't access people's passwords (it's possible that board owners, i.e. Sheddie in our case, can reset passwords, but there's no evidence that the fake mods were able to give themselves that level of access), though these days it always makes sense not to use the same password on more than one site anyway, pain in the neck as that is.



__________________

GB on a shirt, Davis Cup still gleaming, 79 years of hurt, never stopped us dreaming ... 29/11/2015 that dream came true!

GB top 25s (ranks, whereabouts) & stats - http://www.britishtennis.net/stats.html



Tennis legend

Status: Offline
Posts: 19391
Date:

I notice that the Fake Mods have now disappeared from the list. So to those who manage and protect the board, a big thank you from me for the work you do. And well done again to ABB for spotting the problem in the first place.

__________________


All-time great

Status: Offline
Posts: 5134
Date:

Amazing spot by ABB. thank you

__________________


All-time great

Status: Offline
Posts: 5568
Date:

Hello lovely Mods, my message just got spam-tagged. Please check and approve if suitable. Ta!

__________________


Tennis legend

Status: Offline
Posts: 13869
Date:

Got it!

__________________


All-time great

Status: Offline
Posts: 5568
Date:

wolf wrote:

Got it!


Thank you



__________________
«First  <  1 2 3 4 | Page of 4  sorted by
 
Quick Reply

Please log in to post quick replies.

Tweet this page Post to Digg Post to Del.icio.us


Create your own FREE Forum
Report Abuse
Powered by ActiveBoard