Avata | Bitcointalksearch.org

hilariousandco

global moderator

Activity: 3990

Merit: 2713

Join the world-leading crypto sportsbook NOW!

Quote from: Hazir on November 14, 2014, 07:10:56 AM

When we will be able to use avatars again they should be available to only high status members I think. Hero and up.

Why? I can understand disallowing Newbs to have them to limit impersonation, but limiting it to Hero seems a bit extreme.

Quote from: 1Referee on November 14, 2014, 07:43:55 AM

So avatars are used to hack the forum. But I'm wondering how?

If you allow users to just upload .jpg files with certain dimensions, nothing will happen I guess.

I don't know the full details but I think malicious code was uploaded or implemented somehow.

1Referee

legendary

Activity: 2170

Merit: 1427

So avatars are used to hack the forum. But I'm wondering how?

If you allow users to just upload .jpg files with certain dimensions, nothing will happen I guess.

Hazir

legendary

Activity: 1596

Merit: 1005

★Nitrogensports.eu★

When we will be able to use avatars again they should be available to only high status members I think. Hero and up.

Orangina

sr. member

Activity: 309

Merit: 250

as far as I know , a new version of the forum (update) will be available on February 2015 . and avatars will be available
but not sure , since we skipped the beta test date Huh

Dare

hero member

Activity: 508

Merit: 500

Techwolf on #bitcoin and Reddit

To quote myself from the last time this came up (yes, it's been asked at least this many times; there are currently two Meta threads asking this same question, even):

Quote from: Dare on November 13, 2014, 12:40:39 AM

Quote from: Dare on September 05, 2014, 05:44:37 PM

Quote from: Dare on September 11, 2014, 12:35:33 PM

Quote from: Dare on August 25, 2014, 12:05:00 PM

Quote from: Dare on August 15, 2014, 08:00:12 PM

Quote from: Dare on August 13, 2014, 06:16:52 AM

Quote from: Dare on July 29, 2014, 12:19:17 AM

Quote from: Dare on July 23, 2014, 02:23:13 AM

Quote from: Dare on March 30, 2014, 02:28:24 AM

Quote from: Sirrah on March 29, 2014, 09:42:47 PM

Quote from: OhShei8e on March 29, 2014, 09:33:28 PM

Any progress?

Please turn off this forum! The avatars are the only advantage over a mailing list. This is bitter but true. Give something better a chance. Give up!

I'm pretty sure that avatars will be disabled until at least the new forum is out and being used - as theymos has stated it was removed due to an exploit made possible by avatars and though I believe the exploit has been patched he is not keen on restoring the functionality.

From what I've heard, pretty much. The exploit involved uploading a php script instead of an image into an executable directory, then using it to put some (slightly) malicious Javascript into the forum's MOTD so that it ran on every page. I followed the troubleshooting and analysis through IRC while it was being fixed immediately after the hack, but it seems that avatars may be disabled for a while anyway.

Though the exploit used has been patched, it's been long enough that I suspect new avatars may remain disabled until the new forum software is put into place, but those who had them before the hack like me were able to keep them (though we can't change our avatars either).

Official response on the ETA of the new forum:

Quote from: mprep on July 21, 2014, 12:27:51 PM

Q: Why doesn't the forum let me add an avatar?
A: The forum was hacked some time ago. It is thought that the avatars were used as a means of injecting malicious code into the forum. Even though the vulnerability was patched, the avatars will be disabled until a new forum software is released.

Q: So when is the new forum software coming?
A: Well, according to theymos, some time after February 2015.

Quote from: theymos on February 10, 2014, 09:50:26 PM

<...>

Quote

When will the software be finished?

About one year from now.
<...>

bluemountain

full member

Activity: 197

Merit: 100

If by 'avata' you mean "Avatar" or the picture next to some people's username, then they were partially disabled when the forum got hacked last year (the ability to change/add avatars was disabled).

When the new forum goes live sometime early next year avatars will be re-enabled again

big.ecurrency

newbie

Activity: 17

Merit: 0

title how long forum will open use avata here ?

Topic: Avata (Read 1072 times)